Greetings!

Skar wrote:


> I'm trying Ipsec con. between Vpn-1 and Cisco IOS.


On FW1 you have to:
        - disable aggressive mode (checkbox in IKE in
          network-object/VPN)
        - have the host (or maybe the complete subnet) in the
          encryption domain (in network-object/VPN)
        - set Renegotiation time (Pilicy/Properties/Encryption)
          to less than 1440 minutes.

Bye
        Volker

--

Volker Tanger  <[EMAIL PROTECTED]>
  Wrangelstr. 100, 10997 Berlin, Germany
     DiSCON GmbH - Internet Solutions
          http://www.discon.de/

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to