pix to checkpoint 4.1

[#1]

At a loss. We are trying to set up a site-to-site with a pix 501 and checkpoint 4.1. The ike tunnel comes up but we see an error in phase 2. We have verified all timers numerous times. the error in debug is:

SAKMP (0): atts are acceptable.

ISAKMP: IPSec policy invalidated proposal

ISAKMP (0): SA not acceptable!

ISAKMP (0): sending NOTIFY message 14 protocol 3

return status is IKMP_ERR_NO_RETRANS

Anyone have any ideas? We have also tried md5 and sha and get same results.

Greg

[jmia]

Greg,

Have you checked this document:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094ac4.shtml

Hope this helps and if it does please rate post.

[jmia]

Greg,

Sorry posted the wrong URL, here is the one for PIX to Checkpoint 4.1

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008009420f.shtml

Jay

[#4]

Yes I was all over that document, thanks!

[#5]

Sorry this issue is fixed. It was a mismatch on access lists... I was defining the hosts I can access on his network while he let me have access to the whole network.