Hello,
We are testing migrating from an IPSO cluster (VRRP) running R65 to a new
SPLAT cluster on R75.1
Objects and Policy appear to migrate fine and the security policy rules and
NAT appear to work fine but we are unable to re-establish the VPN tunnels.
This happens when we leave it in the default Simplified mode, after the
import the original policy is in traditional mode. The current policy uses
Traditional Mode configurations so when it is imported and defaults to
Simplified we change it back and then when we try to push policy
it complains that one of the Checkpoint Objects (another cluster that is
internal to the network and never has had VPN) doesn't have VPN turned on.
Yet none of the encrypt rules are applied to that gateway.
Has anyone had experience with a similar migration or any suggestions on
cause of the problem?
Regards
--
"The wild requires that we learn the terrain, nod to all the plants and
animals and birds, ford the streams and cross the ridges and tell a good
story when we get back home."
Gary Snyder
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
