Dave Shepherd <[EMAIL PROTECTED]> wrote: > > encryption failure reason: Packet is dropped because there is no valid SA
SA stands for Security Association. During IKE negotiation, an SA is established, and used for the encryption of the VPN. There should be an SA negotiated in each direction. The SA is set up during the keyinstall process. You should find the IKE keyinstall messages in the log, that describe what went wrong during that phase. The message you see is an after-message that results from a previous failure of a keyinstall. -- David DeSimone || "It took me fifteen years to discover that I had no Network Admin || talent for writing, but I couldn't give it up because [EMAIL PROTECTED] || by that time I was too famous. -- Robert Benchley ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
