Another important thing to check is make sure the Diffie Helman groups match for both Phase1 and Phase2 on both firewalls.
Craig -----Original Message----- From: Scott Friedman [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2003 10:17 AM To: [EMAIL PROTECTED] Subject: Re: [FW-1] NG Site-to-site VPN Problem Usually the error "no proposal chosen" will lead you to encryption domain misconfigurations.... Check that As well as the IKE/IPSec timer expirations under Policy - Global Properties. -----Original Message----- From: Ian Gilfillan [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2003 10:11 AM To: [EMAIL PROTECTED] Subject: Re: [FW-1] NG Site-to-site VPN Problem check the SA renewel times...they should be the same. Ian -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] Behalf Of Arica, Umut Sent: 09 June 2003 13:46 To: [EMAIL PROTECTED] Subject: Re: [FW-1] NG Site-to-site VPN Problem Yes I did. Thanks. Umut Arica -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2003 3:20 PM To: [EMAIL PROTECTED] Subject: Re: [FW-1] NG Site-to-site VPN Problem Have you checked the actual settings on the encrypt rule? Rob Rutherford |---------+--------------------------------------------> | | "Arica, Umut" | | | <[EMAIL PROTECTED]> | | | Sent by: Mailing list for | | | discussion of Firewall-1 | | | <[EMAIL PROTECTED]| | | KPOINT.COM> | | | | | | | | | 09/06/2003 11:49 | | | Please respond to Mailing list | | | for discussion of Firewall-1 | | | | |---------+--------------------------------------------> >----------------------------------------------------------------------- >---- -------------------| | | | To: [EMAIL PROTECTED] | | cc: | | Subject: [FW-1] NG Site-to-site VPN Problem | >----------------------------------------------------------------------- >---- -------------------| Hi all, I have a problem with site-to-site vpn configuration. My checkpoint NG is FP1 and the other site is FP2. I double checked the enc. alg., method, data integrity, etc... Everything is the same with the other node. 3DES, MD5, DH Group 2. We use pre-shared secret key. When I look at the logs, I get the message "IKE: Main Mode Sent Notification: no proposal chosen". What can be the reason? Any ideas??? Regards, Umut Arica<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /> ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ******************************************************************** This E-mail and any files transmitted with it are in commercial confidence and intended solely for the use of the individual or entity to whom they are addressed. If you have received this E-mail in error please notify the Administrator by E-mail ([EMAIL PROTECTED]). Any views or opinions expressed are solely those of the author and do not necessarily represent those of DEK International., or its affiliates. ******************************************************************** This footnote signifies that this message has been checked for viruses by MailswpUK1 ******************************************************************** ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= * EMAIL DISCLAIMER AND TERMS OF USE * The information transmitted is intended only for the person to whom it is addressed and may contain confidential and/or privileged material. If you have received an email in error please notify [EMAIL PROTECTED] and then delete all copies of it from your systems. Any use of, or any action relying upon, information in an email by persons other than the intended recipient is prohibited. Although Hilite International scans incoming and outgoing emails and email attachments for viruses we cannot guarantee a communication to be free of all viruses nor accept any responsibility for viruses. Although Hilite International monitors incoming and outgoing emails for inappropriate content, Hilite International cannot be held responsible for the views or expressions of the author. The views expressed may not necessarily be those of Hilite International and Hilite International cannot be held responsible for any loss or injury resulting from the contents of a message. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
