This is an Example between a PIX and Check Point FW For example PIX 6.3.3. Check Point 4.1 or NG Pix Side PIX Firewall 10.10.10.1 (Internal) 200.200.200.2 (External) Host behind the PIX 10.10.10.3 and with NAT 200.200.200.3 Check Point Side Check Point Firewall 210.210.210.2 (External) 192.168.10.1 (Intenal) Host behind the Check Point 192.168.10.3 and with NAT 210.210.210.3 Schema The VPN is with the following parameter: 3DES. MD5 (for both phases) EXAMPLE_OF_SECRET (Preshared Secret) The host 210.210.210.3 want to comunnicate with the host 200.200.200.3 THIS IS THE CONFIGURATION ON THE PIX SIDE, ##NAT for the Internal IP## static (inside,outside) 200.200.200.3 10.10.10.3 255.255.255.255 255.255.255.255 0 0
access-list Test_Access_List permit ip host 200.200.200.3 hots 210.210.210.3 sysopt connection permitâipsec ##### PHASE 2 ##### ##Define set of encripcion, in this case is 3DES and MD5## crypto ipsec transform-set pixset esp-3des esp-md5-hmac crypto map testmap 10 ipsec-isakmp crypto map testmap 10 match address Test_Access_List crypto map testmap 10 set peer 210.210.210.2 crypto map testmap 10 set transform-set pixset crypto map testmap interface outside #####PHASE 1 ###### isakmp enable outside isakmp keyEXAMPLE_OF_SECRET address 210.210.210.2 netmask 255.255.255.255 isakmp identity address isakmp policy 20 authentication pre-share isakmp policy 20 encryption 3des isakmp policy 20 hash md5 isakmp policy 20 group 2 isakmp policy 20 lifetime 86400 On the Check Point SIDE, You know, this is very simple. Ing. Oscar Aviles Sandoval Director Gerente Secure Soft S.A.C. <blocked::mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED] Paseo de la Castellana 631 Oficina 101 Santiago de Surco Lima â Perà (511) 99111867 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
