hi,
check with tcpdump if your ike and ESP packets to to and come from
the VRRP-IP-address of your cluster
further more: is the object-IP of you cluster the external VRRP IP?
cheers
reinhard
At 21:38 08.06.2006, you wrote:
Hi, i installed a Smart Center Server SPLAT with NGX R61, with 2
gateways nokia running ipso 4.0 and ngxr61. I configured VRRP on the
gateways and are working correctly.
But i have the problem that i can't connect using SecureRemote, if i
try i see on SmartTracker IkePackets but never authenticate, if on
Global Properties --> RemoteAccess--> VPN-Basic: On IKE over TCP i
check Gateways support IKE over TCP, then i can authenticate but if
i initate any connection i see the drop connection: encryption
failure: Unknown SPI: 0x10c07942 for IPsec packet.
AND encryption fail reason: Packet is dropped because an IPsec SA
associated with the SPI on the received IPsec packet could not be found.
Anyone have this problem ? Thanks
A.Gastambide
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
--
Reinhard Stich [EMAIL PROTECTED]
Internet Security AG, 1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
