This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Astaro 6.3 and Check Point FW1 Lan2Lan VPN peer ID trouble

I'm trying to set up a Lan to Lan VPN between my Astaro 6.304 and Check Point FW-1 (I think it's a new NGX) and everything should be straightforwards... but I'm getting problems:

2007:09:11-14:41:27 (none) pluto[20731]: "S_Extranet_-_Customer_0" #313: Main mode peer ID is ID_IPV4_ADDR: '0.0.0.0'

2007:09:11-14:41:27 (none) pluto[20731]: "S_Extranet_-_Customer_0" #313: we require peer to have ID 'aaa.bbb.ccc.92', but peer declares '0.0.0.0'

2007:09:11-14:41:27 (none) pluto[20731]: "S_Extranet_-_Customer_0" #313: sending encrypted notification INVALID_ID_INFORMATION to aaa.bbb.ccc.92:500

Have anyone seen this error before and/or know how to get the Check Point to report the correct peer ID?

This thread was automatically locked due to age.

Parents

0 SilverOne over 18 years ago

Joffer,

Different manuals;

http://www.astaro.com/kb/
Cancel
Vote Up 0 Vote Down

Cancel
0 Joffer over 18 years ago in reply to SilverOne

Can't say I found anything I could use there. For me it looks like I have to have the check point configured to send the correct peer ID...
Cancel
Vote Up 0 Vote Down

Cancel
0 bbb_01 over 18 years ago in reply to Joffer

http://portal.knowledgebase.net/display/2/kb/article.asp?aid=138740&n=2&s=1

Its a old howto...maybe it helps you.

bbb

http://portal.knowledgebase.net/display/2/kb/article.asp?aid=138740&n=2&s=1
Cancel
Vote Up 0 Vote Down

Cancel
0 Joffer over 18 years ago in reply to bbb_01

The right link would be: http://portal.knowledgebase.net/display/2n/kb/article.asp?aid=138740

Anyway, I sent it to the person who configures the checkpoint and we couldn't make it work with this config either [[:(]]

For now he's sending me a small "edge box" from checkpoint so we get the a vpn up and running [[:(]]
Cancel
Vote Up 0 Vote Down

Cancel
0 Joffer over 17 years ago in reply to Joffer

I worked it out. One route was sending my packets the wrong way [:(]
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Joffer over 17 years ago in reply to Joffer

I worked it out. One route was sending my packets the wrong way [:(]
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data