Hi, all.
Has anyone ever tried to set up site-to-siteVPN between Checkpoint VPN-1
and Planet VRT-311 ?
Could you please share your experience ?
I can't understand why I'm getting messages like that in the Planets log
[10:54:20][==== IKE PHASE 2(from START (responder) ====]
[10:54:20]**** RECEIVED FIRST MESSAGE OF QUICK MODE ****
[10:54:20]**** FOUND IDs,EXTRACE ID INFO ****
[10:54:20]<Initiator IPADDR=xxx.xxx.xxx.xxx>
[10:54:20]<Responder IPADDR=kkk.kkk.kkk.kkk MASK=255.255.255.0>
[10:54:22][==== IKE PHASE 2(from 212.109.53.26) START (responder) ====]
[10:54:22]**** RECEIVED FIRST MESSAGE OF QUICK MODE ****
[10:54:22]**** FOUND IDs,EXTRACE ID INFO ****
[10:54:22]<Initiator IPADDR=xxx.xxx.xxx.xxx>
[10:54:22]<Responder IPADDR=kkk.kkk.kkk.kkk MASK=255.255.255.0>
................
[11:01:04][==== IKE PHASE 2(from xxx.xxx.xxx.xxx) START (responder) ====]
[11:01:04]**** RECEIVED FIRST MESSAGE OF QUICK MODE ****
[11:01:04]**** FOUND IDs,EXTRACE ID INFO ****
[11:01:04]<Initiator IPADDR=xxx.xxx.xxx.xxx>
[11:01:04]<Responder IPADDR=kkk.kkk.kkk.kkk MASK=255.255.255.0>
[11:01:05]**** SENT OUT INFORMATIONAL EXCHANGE MESSAGE(DELETE_PAYLOAD) ****
[11:01:06][==== IKE PHASE 2(from xxx.xxx.xxx.xxx) START (responder) ====]
[11:01:06]**** RECEIVED FIRST MESSAGE OF QUICK MODE ****
[11:01:06]**** FOUND IDs,EXTRACE ID INFO ****
[11:01:06]<Initiator IPADDR=xxx.xxx.xxx.xxx>
[11:01:06]<Responder IPADDR=kkk.kkk.kkk.kkk MASK=255.255.255.0>
[11:01:08][==== IKE PHASE 2(from xxx.xxx.xxx.xxx) START (responder) ====]
[11:01:08]**** RECEIVED FIRST MESSAGE OF QUICK MODE ****
[11:01:08]**** FOUND IDs,EXTRACE ID INFO ****
[11:01:08]<Initiator IPADDR=xxx.xxx.xxx.xxx>
[11:01:08]<Responder IPADDR=kkk.kkk.kkk.kkk MASK=255.255.255.0>
[11:01:10][==== IKE PHASE 2(from xxx.xxx.xxx.xxx) START (responder) ====]
[11:01:10]**** RECEIVED FIRST MESSAGE OF QUICK MODE ****
[11:01:10]**** FOUND IDs,EXTRACE ID INFO ****
[11:01:10]<Initiator IPADDR=xxx.xxx.xxx.xxx>
[11:01:10]<Responder IPADDR=kkk.kkk.kkk.kkk MASK=255.255.255.0>
.............
and CP Tracker says:
Number: 136233
Date: 12Aug2005
Time: 12:01:35
Product: VPN-1 Pro/Express
VPN Feature: IKE
Interface: daemon
Origin: enf (xxx.xxx.xxx.xxx)
Type: Log
Action: Reject
Reject Reason: IKE failure
Protocol: ip
Rule: 0 - Implied Rules
Encryption Scheme: IKE
VPN Peer Gateway: Planet (zzz.zzz.zzz.zzz)
Subproduct: VPN
Information: encryption failure: no response from peer.
Why <Initiator IPADDR=xxx.xxx.xxx.xxx> is the public address of CP VPN-1
while <Responder IPADDR=kkk.kkk.kkk.kkk MASK=255.255.255.0> is the
network behind the Planet ?
Thanks in advance,
Andrey.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
