Russell, You do not need a newer firmware. Do you have any further log info from the negotiation cycle?
You will want to validate the settings on the remote gateway (edge device) to see if NAT is in use, and if so, verify that you are expecting to establish SA with the external ip of the edge. I've not seen many problems with this config. Cryptotech ----- Original Message ----- From: "Russell Aspinwall" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, September 28, 2004 6:01 AM Subject: [FW-1] Site to Site VPN > I am trying to establish a VPN between an Edge unit running firmware v.4.5.44x and ng-ai R55 hfa-07. > The edge is configured as Interoperable Device, using the same instructions I used before but I can > not establish a VPN. I get as far as a Key Exchange. > > Do I need to run a later HFA to fix this? > -- > Regards > > Russell > > Email: russell dot aspinwall at flomerics dot co dot uk > Network and Systems Administrator Flomerics Ltd > Telephone: 020-8941-8810 x3116 81 Bridge Road > Facsimile: 020-8941-8730 Hampton Court > Surrey, KT8 9HH > United Kingdom > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
