Solved

VPN from PIX515 to checkpoint

Posted on 2009-07-10
2
377 Views
Last Modified: 2013-11-16
I have a vpn setup  from PIX515 V7.0 to checkpoint. i am getting phase 1 to complete but phase 2 does not come up.  using aes-256/md5 on both sides. and lifetime is the same. looking for help more on the pix side of my setup to make sure config is correct. i do have a site to site up and running to another location from this pix to another pix.
0
Comment
Question by:Firstcorp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 33

Accepted Solution

by:
MikeKane earned 500 total points
ID: 24826019
How are you certain phase 1 completes?   Log files?  

If you're sure phase 2 is failing, then look at 1 of these:
1) mismatch or unsupported IPSEC proposals
2)The crypto and nonat access lists don't match on each side.   Each side's config must match exactly. \


If it fails, post a snippet of the log file....
0
 

Author Closing Comment

by:Firstcorp
ID: 31602198
It was the renegatiate time on the checkpoint.
0

Featured Post

Surfing Is Meant To Be Done Outdoors

Featuring its rugged IP67 compliant exterior and delivering broad, fast, and reliable Wi-Fi coverage, the AP322 is the ideal solution for the outdoors. Manage this AP with either a Firebox as a gateway controller, or with the Wi-Fi Cloud for an expanded set of management features

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
adjusting startup config 6 55
Layer 3 switch recommendation 15 61
How to obtain the firewall config for Cisco ASA Firewall- 5512-X 5 27
AD Design Best Practices 6 39
I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question