Interoperatability b/w Checkpoint & Cisco Pix

[thebull]

Hi All,

We need your assistance

Issue: VPN Pkts get dropped.

1) A Site-to-Site VPN is established b/w Checkpoint & Cisco PIX.
2) Often the connectvitiy Flaps, i.e. the pkst get dropped.

Error:

Pix: Duplicate pkt on Phase 2

Checkpoint: Virtual defragmentation error: Timeout

When checked in Google, the solution is 'caused to due to jumbo packets traversing thru the tunnel' and need to change the MTU size.

We have S-2-S tunnels with multiple customers and have issue with only one customer and he is asking to change the MTU Size. To my knowledge we can only change MTU for an interface and not for tunnel.

Kindly advice me on this.

Regards,
Thebull.

[flawless_cowboy]

What versions of PIX IOS and Check Point are you using? We have a ton of VPNs to PIX firewall from our Check Point boxes without any major issues, although that was not always the case.