IPSec LAN-LAN Tunnel b/w 3005 and CheckPoint

[mnlatif]

Hi,

We have IPSec LAN-LAN tunnel configured between a Cisco VPN3005 and Nokia CheckPoint. However ocassionally the below message is showing up in the logs

(x.x.x.x = IP Address of Nokia CheckPoint)

++++++++++++++++++++++++

17161 01/05/2004 08:46:12.440 SEV=3 AUTH/5 RPT=16 x.x.x.x

Authentication rejected: Reason = Simultaneous logins exceeded for user

handle = 730, server = (none), user = x.x.x.x, domain = <not specified>

+++++++++++++++++++++++

Why would this message come up for a LAN-LAN Tunnel ? There is No Login from this peer, it is Not a Remote Access Connection.

We started seeing this message, since we upgraded the Concentrator from 4.0.1.A to 4.0.4.A.

Is it possible that Upgrade corrputed some of the database ?

Should i re-configure the Tunnel again ?

Regards,

\\ Naman

[mikegallagher]

On the 3005, go into:

Configuration>User Management>Groups

and find the L2L tunnel you are having the issue with and click "Modify Group". Click the "General" tab and make sure "Simulanteous Logins" is >0.

HTH,

Mike