CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > VPN's (Virtual Private Networks)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-04-28
Junior Member
 
Join Date: 2006-04-28
Posts: 2
Rep Power: 0
SLECS99 has an average reputation (10+)
Default Problem setting up Firewall 1 / Cisco PIX site-to-site VPN

I am trying to set up a site-to-site VPN with a customer. I'm using Checkpoint 4.1 and they have a Cisco Pix.
We are using IKE, DES, and MD5 encryption, with pre-shared secret
When I try to remote desktop to the PC behind the Cisco Pix I see the following messages in my log viewer
Key install IKE Log Phase 1 completion DES/MD5/Pre shared secrets Negotation Id: xxxxxxxxxxxx xxxxxxxxx
Key Install IKE Log Received negotiation from peer: Negotiation ID xxxxxxx

I have several similar rules with other customers with Cisco Pix that are working.
Any ideas what the problem could be?
Thanks

Last edited by SLECS99; 2006-04-28 at 06:30.
Reply With Quote
  #2 (permalink)  
Old 2006-04-28
Senior Member
 
Join Date: 2005-08-22
Location: Ottawa, Canada
Posts: 347
Rep Power: 4
Lackie has an average reputation (10+)
Default Re: Problem setting up Firewall 1 / Cisco PIX site-to-site VPN

What problem are you having? The messages that you have provided appear to be saying that you have negotiated Phase 1 but are not indicating a problem.
Reply With Quote
  #3 (permalink)  
Old 2006-04-30
Junior Member
 
Join Date: 2006-04-28
Posts: 2
Rep Power: 0
SLECS99 has an average reputation (10+)
Default Re: Problem setting up Firewall 1 / Cisco PIX site-to-site VPN

I'm expecting to see the phase 2 completion message for the subnets defined in my encryption rules. Since I'm not really getting an error, what could be causing this. Would it be that I'm not accessing the proper network (if they are NATing the network I am trying to get to). Would I get an error indicating this?
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 23:55.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0