Peer asked for deny authentication

[roadrunner]

Peer asked for deny authentication
(Relevant to FireWall-1 4.1 and earlier)

There seems to be a mismatch between the peers authentication and this machines authentication scheme for FW-1 communications between them. It might be a good idea to make sure that on both machines FW-1 was installed correctly and that the control and managed hosts were stated correctly. You can check this in:

$FWDIR/conf/masters (on the managed machine)

and:

$FWDIR/lib/control.map

As the peer asked for "deny" authentication it would be my guess that it was not configured to recognize this host. Another common reason for this type of problem is a "fw putkey" done for only one of the gateways IP addresses instead of all of its IP addresses (one for each interface), or even routing problems reaching one of its interfaces (IP addresses) which could cause such error messages.

-- GuyR - 11 Jan 2004


FAQForm
FAQs.Class: RemoteManagementFAQs
FAQs.OS:
FAQs.Version: