CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Check Point VPN-1 Edge Appliances
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-07-15
Junior Member
 
Join Date: 2006-06-08
Posts: 9
Rep Power: 0
kpatel has an average reputation (10+)
Default manual site-to-site vpn working with smartcenter it does not work

Folks


I have a situation where I can make my edge box work if I do manual site-to-site VPN to my firewall at the other end. If I try to establish the tunnel with smartcenter it does not work. I can connect to smartcenter fine from VPN edge box but it does not create the tunnel. Any ideas?
Reply With Quote
  #2 (permalink)  
Old 2006-07-17
Member
 
Join Date: 2006-04-07
Location: Penzberg, Germany
Posts: 44
Rep Power: 0
Izzio has an average reputation (10+)
Default Re: manual site-to-site vpn working with smartcenter it does not work

Which Edge firmware and smartcenter version are you using?
Is the "Enterprise" VPN-Tunnel present?

Normally you will find by "Reports -> Event log" informations about the Tunnel Key Exchange that can help you for troubleshooting.

Ciao - Maurizio
Reply With Quote
  #3 (permalink)  
Old 2006-07-21
Junior Member
 
Join Date: 2005-10-07
Posts: 1
Rep Power: 0
ecolas has an average reputation (10+)
Default Re: manual site-to-site vpn working with smartcenter it does not work

Hi everyone,

Here is my config:
FW-1 R55 HFA17 SPLAT
VPN-1 Edge X

I had configured FW-1 to work with VPN-1 Edge and all was fine. But recently, i try to reconnect and problems appeared.
The tunnel is ok, all logs from VPN-1 Edge are posted in SmartViewTracker, but i can't communicate with LANs. My rule base is ok and I see that VPN-1 Edge encrypt packets but FW-1 never decrypt.
I have securemote users that can connect and for them it works fine.
I did a new time all the config for VPN-1 Edge and FW-1 (community, rule base, encryption) but LANs are always invisible.

Anybody have a suggestion.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 05:32.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0