Greg,
Ensure that your IKE and IPSEC timeouts are the same on both the PIX and
FW-1. These are normally set to 14400 minutes (1 week) and 3600 seconds on
the FW-1 and 86400 seconds (1 day) and 3600 seconds on the PIX. If they
don't match exactly, neither box will negotiate.
Jim
-----Original Message-----
From: Net Secure [mailto:[EMAIL PROTECTED]]
Sent: Friday, 5 January 2001 11:27 a.m.
To: [EMAIL PROTECTED]
Subject: [FW1] FW-1 to PIX VPN
Does anyone know of an issue creating a VPN from FW-1 to PIX.
The PIX is version 5.23 the firewall is a Nokia 440 fw 4.0 sp4 ipso 3.2.1.
I have followed the documentation from Check Point and get the following
errors:
If the VPN is attempted from the FW-1 side; no proposal chosen.
>From the PIX; fails on the 2nd stage of key negotiation.
Thanks,
-Greg
-----------------------------------------------
FREE! The World's Best Email Address @email.com
Reserve your name now at http://www.email.com
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
