hi,
hfa01 is installed on both management and module.
nat should not be the problem, since ping is no problem in both directions and
tracroute shows that the connection is routed through the tunnel.
we tried two ways:
first) edgebox tries to register to private ip of management.
second) static nat of management to outside. edgebox tries to register to public
(nated) ip address of management.
in both cases we see one unencrypted packet UDP SWTP-SMS passing in through the
firewall. a packet trace verfies that the packet reaches the management. but no answer
at all from the management can be seen in the packet trace.
regards
peter
________________________________
Von: Mailing list for discussion of Firewall-1 im Auftrag von Reinhard Stich
Gesendet: Di 10.02.2004 23:53
An: [EMAIL PROTECTED]
Betreff: [FW-1] AW: [FW-1] VPN Edge integration with R55 SmartCenter
hi,
did you install hfa_r55_01 on your R55 mgmt?
did you care about the NAT between the mgmt and the edge-box?
cheers
reinhard
-----Urspr�ngliche Nachricht-----
Von: Peter Weyrosta [mailto:[EMAIL PROTECTED]
Gesendet: Di 10.02.2004 22:52
An: [EMAIL PROTECTED]
Cc:
Betreff: [FW-1] VPN Edge integration with R55 SmartCenter
We just upgraded a Nokia Module and a Windows 2000 SmarCenter from FP3 to R55.
We reconfigured our Edge Devices (Firmware 4.0.73x) as Checkpoint Embedded Device and
got the Tunnels up with no problem at all. (We didn't use the Edge Connector with FP3
and had all the Edge boxes configured as Externally Managed Gateway before)
But the integration with the management doesn't work. The Edge Device sends an
UDP Packet SWTP-SMS (9282) to the SmartCenter Server but never gets an answer. So the
Edge Device cannot register with the Smart Center.
We looked at the port listening table of the SmartCenter Server and he's
listening on UDP port 9282. Both devices can ping each other. We looked at the
different log files, but couldn't find any entry that relates to this
connection.(except the one UPD packet accepted in the main log)
Compared with the solution for R54 we're missing the Sofaware Server in the
services table of the SmartCenter server, but could not determine from the available
docs wether this is OK or not.
As of the docs everything for the Edge integration should be up an running
after the upgrade. We doublechecked our configs but couldn't find a difference to the
guidelines.
Any idea ?
Peter Weyrosta
LAN NETZWERKSYSTEME GmbH.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
