anyone, I've attached a diagram to give more details of the scenario. Now here's the prob., the customer using his PDA wants to access his private network via GPRS through VPN connection. The Nokia box running NAT=overloading and checkpoint firewall with 3DES, SHA1 configured. For the customer VPN box (which seems to be a Cisco 7209) its, AES-CBC for encryption method and SHA2 for Hash Algo. For the normal scenario, PDA accessing his private network, NAT=overloading, can be authenticated but cannot access the private network. However, doing a static NAT, PDA can access the application from private network. Is there any problem of the compatibility of encryption method and hash algorithm use? Any suggestion what to do with this kind of situation. Thanks a lot in advance!
