you created a cluster object? -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED]]On Behalf Of Kinsey, Brian A. Sent: 16 May 2002 16:49 To: [EMAIL PROTECTED] Subject: [FW-1] VPN Question - ICMP Packet Out of State - Linksys BEFVP41
I am trying to set up a VPN between my NG FP1 FW and a Linksys BEFVP41. I see the key installs in my log, and the Linksys shows the Status as Connected, but I cannot access machines across the tunnel. When I try to ping from a machine behind the Linksys to a machine inside my firewall, I get request timed out. In my firewall log, I see the following: Source = firewall external IP Destination = Linksys external IP Action = Drop Info = icmp-type 3 icmp-code 2 message_info ICMP packet out of state Also, my firewalls are Nokias with VRRP (monitored circuit). If I enter the virtual external address of my firewalls into the Remote Security Gateway field on the Linksys, I don't even get the key installs. I have to enter the actual IPs of one of the firewalls for it to get that far. Any ideas as to why I can't terminate my VPNs to the virtual IP? Thanks, Brian ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
