Miguel Nuno Cardoso Fernandes Ferreira <[email protected]> wrote: > > Time: 8:38:46 > Information: IKE: Main Mode completion [UDP].
> Time: 8:38:46 > Information: IKE: Informational Exchange Received Delete IKE-SA from Peer: > cisco > > On the cisco side we got some log's that said the phase 1 was > complete, accpepted the ipsec proposal of the second phase and then > delete sa. It sounds like your Cisco endpoint and FW-1 endpoint agree about what happened. The SA is negotiated and then immediately deleted at request of the Cisco. > Any ideas that could help? I am guessing that the Cisco somehow has the lifetime parameter set or negotiated to zero? This would make it delete the SA so quickly. -- David DeSimone == Network Admin == [email protected] "I don't like spinach, and I'm glad I don't, because if I liked it I'd eat it, and I just hate it." -- Clarence Darrow This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, distribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments. Verio, Inc. makes no warranty that this email is error or virus free. Thank you. Scanned by Check Point Total Security Gateway. Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
