About andrea.francesconi

andrea.francesconi · 02-18-2009

Hi.We observe a strange behaviour on vpn between Cisco Router (LAN A) and Checkpoint (LAN B).More details:* checkpoint secureplatform NGX R65 HFA_30, Hotfix630 Build 007* Cisco Router 2801 with IOS c2801-advsecurityk9-mz.124-2.T.binIn vpn host-to-sit...

andrea.francesconi · 02-18-2009

Checkpoint VPN Domain include 6 subnet, but only 3 of these are listened in Security Tab.We're updated cryptomap access-list on Cisco sides (now there are only these 3 subnets defined in CP 'Security Tab'), and actually all hosts became reachable.Is ...

andrea.francesconi · 02-18-2009

> This is where you have the mis-match in the encryption domain.Yep, you're right.Follow ACL on Router Cisco:ip access-list extended Checkpoint permit ip host 192.168.235.15 192.168.19.0 0.0.0.255 permit ip host 192.168.235.15 10.0.1.0 0.0.0.255 perm...

andrea.francesconi · 02-18-2009

> Instead "exchange key per subnets", use"exchange key per hosts",I did that.> Use "vpn debug ikeon" to findout whatgoing on. Use can use IKEView.exe toview the debug. It will tell you EXACTLYwhat goes wrong. Ok, I attach debug in post (file called i...

andrea.francesconi · 02-18-2009

Hi James,thank you for your quick reply.> This looks to be a enrcyption domain issue, which is common with Checkpoints. The only way to gaurentee the encryption domain behaviour is predictable then please read the Checkpoint "VPN-1 VPN Interoperablit...

Member Since	‎02-16-2009 08:27 AM
Date Last Visited	‎08-18-2017 03:55 AM
Posts	5

User Statistics

User Activity

Host-to-Site between Router Cisco and Checkpoint

Re: Host-to-Site between Router Cisco and Checkpoint

Re: Host-to-Site between Router Cisco and Checkpoint

Re: Host-to-Site between Router Cisco and Checkpoint

Re: Host-to-Site between Router Cisco and Checkpoint