This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

X509 NET_NET (v4.008)

  HI
                  192.168.2.0
     DUBLIN      Astaro
                            | 1.2.3.4
                            |
                            | 1.2.3.5
         CORK       Astaro
                   192.168.10.x

Run  PreShared Secret with No Problems

Dublin  is now the CA  with two CSR entries
                        Dublin_CSR
                        Cork
Both have been signed by the CA

Dublin  local X509  Dublin_CSR
        remote X509  Cork

Export  Cork to Firewall  Cork

ON cork now  have a verification  CA  and one Host Cork.

Going nice  I thought!!!!

All to I have to do is now is now match my cork CSR with Dublin as both were signed by the same CA

Remote Key  must Cork CSR  which match Dublin (Cork CSR).

Installed remote Key .All ok . Setup  VPN characteristics so authenication was X509 Cork.
Then must informing me that I have no local  x509 . Ended up installating Cork as both a local and remote .
IS THIS RIGHT ??????????.

The VPN log on both firwalls are  just full of errors. I need to through them  to see ,if can make sense  of it all

Any help would be great
Gary

This thread was automatically locked due to age.

0 Udo_Seiler over 22 years ago

Hi Fireman,

I've a configuration like yours up and running.

You have to you use the certificate from cork at the firewall dublin to configure the connection and vice versa.
For this you should export the certificate to a floppy and import it at the other firewall.

HTH

Regards

Udo Seiler
Cancel
Vote Up 0 Vote Down

Cancel
0 Fireman over 22 years ago in reply to Udo_Seiler

Hi

Use the Dublin cert as the local key on Dublin (remote key will be cork & Dublin)
Export Dublin cert  to  Cork Firewall and it become both  the local /Remote Key

........... Dublin  ................... Cork
local ......Dublin ................. remote Dublin
Remote..Dublin/Cork ............local    Dublin

Is this the plan ???

Gary
Cancel
Vote Up 0 Vote Down

Cancel