Site to Site VPN Problems..

[nicodiemus]

Hello, folks.

I've got a mixed Checkpoint environment, with SPLAT running my NGX management server, and a VRRP'd pair of IP530's running R55.

The MC runs on the internal network and is hidden behind NAT.

The remote end of the VPN is an IP260 running NGX. This module communicates fine with the MC with my existing NAT rules.

When i try to connect via VPN, i get IKE: Main Mode validation timed out. This message comes from the remote module. The module in my office indicates main mode completed OK.

I can't find any evidence any IKE packets are being dropped by either of the enforcement modules.

Anyone seen anything like this before?

Thanks in advance,

Max