CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > VPN's (Virtual Private Networks)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2005-09-22
Member
 
Join Date: 2005-09-08
Location: England
Posts: 38
Rep Power: 0
thefunkygibbon has an average reputation (10+)
Send a message via MSN to thefunkygibbon
Default VPN "sometimes" working.

Hi,

We're having problems with one of our VPN's where it is seemingly randomly going down even though connectivity is there.

Head Office = R54 and using traditional mode vpns with 4 different sites.

problem site is safe@office 110 with latest firmware.

The errors we see in the HO CP logs are mainly
Quote:
encryption failure: decrypted methods didn't match rule (VPN Error code 03)
The source ip shows it as the lan ip of the machine on the other end of the vpn if that helps.

It does seem random.

I've reset the safe@office box to factory defaults and recreated it. Changed routers. Changed NIC's in the machine on the other side.

Also i've recreated all the objects and rules relating to this vpn within the r54 firewall.

All other site to site vpns to the head office box are fine.

Anyone have any ideas?
Reply With Quote
  #2 (permalink)  
Old 2005-09-28
Member
 
Join Date: 2005-09-08
Location: England
Posts: 38
Rep Power: 0
thefunkygibbon has an average reputation (10+)
Send a message via MSN to thefunkygibbon
Default Re: VPN "sometimes" working.

please has anyone any ideas on this ??

completely at a loss :(
Reply With Quote
  #3 (permalink)  
Old 2005-10-06
Senior Member
 
Join Date: 2005-08-22
Location: Ottawa, Canada
Posts: 347
Rep Power: 4
Lackie has an average reputation (10+)
Default Re: VPN "sometimes" working.

Make sure that Perfect Forward Secrecy is disabled on the main firewall.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 00:01.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0