It works fine in my configuration. Did you push the policy to the firewall after checking the button to enable UDP encapsulation? I don't recall if that is an item requiring a cpstop/cpstart to enable.
-- Jon Allingham Director, IVT Leapstone Systems -----Original Message----- From: Luiz Afonso [mailto:[EMAIL PROTECTED] Sent: Friday, December 19, 2003 7:43 AM To: [EMAIL PROTECTED] Subject: [FW-1] Gateway doesn't support UDP encapsulation ? Hi, I'm trying to connect to a VPN-1 NG AI R55 gateway using SecuRemote R55 client with "Force UDP Encapsulation" and "IKE over TCP" Enabled, to overcome NAT issues. I double checked all the configuration items, including "NAT Traversal" support in Gateway/Remote Access, which is enabled. When I try to connect, IKE main mode completes successfully, but then the following message shows up in log: "Reason: Client Encryption: 'Force UDP Encapsulation' selected on user's profile, but gateway doesn't support UDP Encapsulation." Any ideas ? Thanks, Luiz __________________________________ Do you Yahoo!? Free Pop-Up Blocker - Get it now http://companion.yahoo.com/ ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
