|
hi all,
Has anyone tested VPN using Traditional Mode (setup
with Encryption Rule) which is
one of the 3 VPN cfg methods provided in
CPNG?
We're testing CPNG FP1 with NetScreen
firewalls.
After configuring both ends of the firewalls, we
did a ping to each end and got this msg
from the logviewer, perhaps you guys understand
what it means?
ID SRC
DEST
Info
1 NetScreen
CPNG IKE main mode completed
2 NetScreen
CPNG IKE Informational Exchange Received Delete IPSEC SA from Peer : XBCNsd8s
SPIs: 4asd8514f
3 NetScreen
CPNG IKE Quick Mode Completion IKE IDs:-
192.168.2.0 (msk=/24) and subnet 192.168.4.0 (msk=/24)
4 Remote LAN CPNG
icmp type 8 code 0 encryption failure: Peer GW mismatch ESP: 3DES + MD5 +
PFS
ID 1 = Phase 1 IKE done
ID 3 = Phase 2 IKE done
ID 4 = ??
After viewing the log, it seems that the VPN is established but both ends
of the LAN still cant PING each other.
How is that possible when all the IKE key exchange has been completed as
displayed and all services allowed at both ends?
Perhaps we missed out some cfg's on the CPNG, any suggestions?
Thanks
Alan
|
