Re: IPSec to Checkpoint

2008-11-13 Thread Joe Warren-Meeks
On Wed, Nov 12, 2008 at 07:13:05PM +0100, Hans-Joerg Hoexer wrote: Support for specifying aes key sizes was added february 2008, thus 4.2 does not provide this. Ah, thought so. Well, I got it working by reverting back to using the old isakmpd.conf method. Thanks for your time. -- joe.

Re: IPSec to Checkpoint

2008-11-12 Thread Joe Warren-Meeks
On Wed, Nov 12, 2008 at 02:35:35PM +0100, Claer wrote: Hey there, I don't know if your isakmpd.conf is good or not. The general part seems good. But I'm wondering why you are not using the new configuration file (/etc/ipsec.conf) It's much easier to use and to maintain over time. For your

Re: IPSec to Checkpoint

2008-11-12 Thread Joe Warren-Meeks
On Wed, Nov 12, 2008 at 02:35:35PM +0100, Claer wrote: Hey there, OK, so I've switched to ipsec.conf and it is alot easier! However, I'm still struggling to use aes 256. I have the following: ike esp from 195.24.xxx.x/25 to 62.232.yyy.y/27 \ local 195.24.aaa.aa peer 62.232.bbb.bbb \ main auth

Re: IPSec to Checkpoint

2008-11-12 Thread Claer
On Wed, Nov 12 2008 at 18:13, Joe Warren-Meeks wrote: Hey guys, Hi, I'm struggling to get isakpmd to talk to a checkpoint firewall I need the following parameters General IKE Properties = AES-256 with SHA1 IKE Phase 1 SA = Group2 (1024 bit) IKE Phase 1 SA renegotiation = 1440 IKE Phase

IPSec to Checkpoint

2008-11-12 Thread Joe Warren-Meeks
Hey guys, I'm struggling to get isakpmd to talk to a checkpoint firewall I need the following parameters General IKE Properties = AES-256 with SHA1 IKE Phase 1 SA = Group2 (1024 bit) IKE Phase 1 SA renegotiation = 1440 IKE Phase 2 SA renegotiation = 3600 The network layout looks as follows:

Re: IPSec to Checkpoint

2008-11-12 Thread Hans-Joerg Hoexer
Support for specifying aes key sizes was added february 2008, thus 4.2 does not provide this. On Wed, Nov 12, 2008 at 03:17:17PM +, Joe Warren-Meeks wrote: On Wed, Nov 12, 2008 at 02:35:35PM +0100, Claer wrote: Hey there, OK, so I've switched to ipsec.conf and it is alot easier!

Re: IPSEC with Checkpoint Sonicwall ?

2007-12-13 Thread Michael Gale
Yup ... apparently it is now just a Checkpoint ... Thanks for the catch .. Michael Steven Surdock wrote: Michael Gale wrote: Hey, I have been asked if we can setup an IPSEC connection with a Checkpoint Sonicwall. Currently I have NO information on the remote end except that it is

IPSEC with Checkpoint Sonicwall ?

2007-12-12 Thread Michael Gale
Hey, I have been asked if we can setup an IPSEC connection with a Checkpoint Sonicwall. Currently I have NO information on the remote end except that it is a Checkpoint Sonicwall :( My pass experiences using IPSEC have been on Linux with things like FreeSwan and OpenSwan. Does anyone

Re: IPSEC with Checkpoint Sonicwall ?

2007-12-12 Thread James Records
Little outdated, but this might help: http://cisx1.uma.maine.edu/~wbackman/vpn/ J On Dec 12, 2007 2:06 PM, Michael Gale [EMAIL PROTECTED] wrote: Hey, I have been asked if we can setup an IPSEC connection with a Checkpoint Sonicwall. Currently I have NO information on the remote

Re: IPSEC with Checkpoint Sonicwall ?

2007-12-12 Thread Steven Surdock
Michael Gale wrote: Hey, I have been asked if we can setup an IPSEC connection with a Checkpoint Sonicwall. Currently I have NO information on the remote end except that it is a Checkpoint Sonicwall :( You're already starting with bad communication from the remote end.