this worked for me once with a similar case. under the properties of the interoperable device you may have (linux firewall) defined as the remote peer; have you tried to disable the -support key exchange for subnets- (VPN Advanced section)
good luck. -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Peter Haug Sent: Thursday, December 29, 2005 1:26 PM To: [email protected] Subject: [FW-1] IKE IDs subnet ist wrong Hi, our Firewall is a R60 on SCPLT. we created a site to site VPN with linux Firewall. During IKE negotiation, I see the wrong subnet. It should be a 10.22.0.0/16 but it is 10.20.0.0/14 Our internal networks are 23 subnets from 10.1.0.0/16 to 10.23.0.0/16. I cant finde any network wit the mask /14 in the smartdashboard. Also in the SCPLT I cant find it. where else should I look for this? any hints? Thanks Peter ##### Diese Email wurde durch verschiedene Security Mechanismen geprueft und fuer sauber befunden. Wenn Sie Interesse an diesen Security Checks haben, nehmen Sie mit uns Kontakt auf. http://www.paninfo.com ##### ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
