Don't know of a guide, but there is "vpn tu" from the command line. It
gives you the option of listing ike and/or ipsec sa's for either
specific partner devices or all, as well as clearing one or the other or
both.
jacob c wrote:
1) Is there a single command to force an IKE connection to re-authenticate when troubleshooting a site-to-site vpn? Anything you can do from the gui?
HEre is the only process I know so far. Delete these three tables using this command: fw tab -t <table_name> -x"
IKE_SA_Table
outbound_SPI
inbound_SPI
2) Is there a guide out there to troubleshooting Checkpoint vpns?
Thanks,
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
