hi Amin
you�re right, the manager had fw1 and vpn1 box ticked
unticking it solved the problem
but I had this on version 4 and it worked, never got this problem; in
fact I upgraded v 4.o to 4.1 with backwards compatibility and got no
problem until I had to define a new vpn, when I faced this problem,
just defining it as I had done it in version 4.0
The management is not an enforcement point, but has got firewall 1
software inside so I always did it this way, as I remember
thanks a lot for your help and best regards
jesus calvo
----- Original Message -----
From: Amin Tora <[EMAIL PROTECTED]>
Date: Wednesday, June 27, 2001 6:12 am
Subject: RE: [FW1] dh key asked for the management station?
>
>
> >Version 4.1, sp2 , nt server with 1 gyga ram, SKIP encryption; when
> defining a vpn with two
> >separate machines on the opposite side, I get first correctly the
> ca key
> from the remote
> >management station, but when hitting ok to go to the dh key for the
> firewall gateway,
> >a message appears indicating that I have to define a dh key for the
> management station
> >and it does not let me go on.
>
> Jesus,
>
> Make sure that in the Management Server object,
>
> -you do not have "VPN/FireWall-1 Module" checked
> -make sure the object is set to "external" and "host".
>
> This should fix your issue.
>
> Regards,
>
>
> Amin Tora, CISSP
> ePlus Technology
> http://www.eplus.com
> NASDAQ: PLUS
>
>
>
>
========================================================================
========
> To unsubscribe from this mailing list, please see the
> instructions at
> http://www.checkpoint.com/services/mailing.html
>
========================================================================
========
>
>
------------------------------------------------------------------
This email is confidential and intended solely for the use of the individual to whom
it is addressed. Any views or opinions presented are solely those of the author and do
not necessarily represent those of SchlumbergerSema.
If you are not the intended recipient, be advised that you have received this email in
error and that any use, dissemination, forwarding, printing, or copying of this email
is strictly prohibited.
------------------------------------------------------------------
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================