Title: [FW-1] FP3 HF-1 vpn wrong subnets
|
Use FP2.
-----Original Message-----
From: Mr.P.Taylor
[mailto:[EMAIL PROTECTED]]
Sent: Fri 12/27/2002 2:09 PM
To: [EMAIL PROTECTED]
Cc:
Subject: [FW-1] FP3 HF-1 vpn wrong subnets
We had a 4.1sp5 to 4.1sp5 vpn with no problems.
Upgraded
one side to NG FP3 HF-1....BIG mistake.
I have check each node/network
nothing wrong, masks are all correct.
I have set
ike_use_largest_possible_subnets to (false)
I support
subnets.
3Des,MD5,768 bit
I use the global properties because the vpn
connects
to a 4.1 sp5 HA (stonebeat) cluster.
VPN comes up (time passes
1/2hr or so) VPN goes down.
VPN comes up (time passes 1/2hr or so) VPN goes
down.
VPN comes up (time passes 1/2hr or so) VPN goes down.
VPN comes up
(time passes 1/2hr or so) VPN goes down.
arrrggghhh!!!!!!!
Log viewer
shows the new (NG)gateway trying to establish a
vpn with the wrong
destination network/mask.
What should be a 10.0.0.0/24 shows up as a
10.0.0.16/28
what should be a 192.168.10.0/24 shows up as a
192.168.10.8/29
Does anyone have any
ideas?
Thanks
Peter
=================================================
To
set vacation, Out Of Office, or away messages,
send an email to
[EMAIL PROTECTED]
in the BODY of the email add:
set
fw-1-mailinglist
nomail
=================================================
To unsubscribe
from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If
you have any questions on how to change your
subscription options,
email
[EMAIL PROTECTED]
=================================================
CONFIDENTIAL: This e-mail, including its contents and attachments, if any,
are confidential. It is neither an offer to buy or sell, nor a solicitation of
an offer to buy or sell, any securities or any related financial instruments
mentioned in it. If you are not the named recipient please notify the sender and
immediately delete it. You may not disseminate, distribute, or forward this
e-mail message or disclose its contents to anybody else. Unless otherwise
indicated, copyright and any other intellectual property rights in its contents
are the sole property of Mizuho Securities USA Inc.
E-mail transmission cannot be guaranteed to be secure or error-free. The
sender therefore does not accept liability for any errors or omissions in the
contents of this message which arise as a result of e-mail transmission. If
verification is required please request a hard-copy version.
Although we routinely screen for viruses, addressees should check this e-mail
and any attachments for viruses. We make no representation or warranty as to the
absence of viruses in this e-mail or any attachments. Please note that to ensure
regulatory compliance and for the protection of our customers and business, we
may monitor and read e-mails sent to and from our server(s).
|
