I am trying to setup a VPN between my company and a partner company using ISAKMP as the encryption method. Does FW-1 support NATs under a VPN using ISAKMP? I have created our encryption domain to include the illegal and legal ip address of my systems and the partner's encryption domain to include his legal and illegal address. All of our settings have been verified to match, but I receive an encryption failure in my logs when he pings me. I ping his fiewall and see an encryption log appear, but receive no response. Anyone know how to setup a VPN with NATs using ISAKMP or what our problem is?
Thanks,
Jeff Vaughan
Network Engineer
www.homeloan.com
