Ipsec Vpn

[snapper]

Hello everyone...

I'm looking for information regarding problems creating a vpn between Nokia Checkpoint FW1 and Cisco PIX. More specifically IPSEC issues.

Here's a quick overview of things: I have 2 Nokia FW1 appliances and 2 separate ISP providing BGP (Comcast and Qwest). I attempt to connect IPSEC to anything outside of my LAN and the connection SEEMS like it's opening but then just times out.

I have added rule #1 from my IP outbound to anywhere, any service, any port: accept and still the same thing happens. And this is with any known working VPN outbound (these work from outside my network). I have watched the logs and the tunnels even look like they come up - nothing is dropped. It just doesn't work.

Am I missing something obvious here?

Thanks very much in advance for any help.

[Sergej]

Do you control both ends on VPN link?

Try IPSEC troubleshooting commands on PIX

[snapper]

unfortunately I don't. I don't think that every vpn tunnel is pix though. I was leaning towards some configuration problem on my side - with the FW1's. But there again, everything is allowed with rule #1 being any/any from my device. It's driving me crazy.