VPN tunnel between a VPN-1 edge and a Check Point cluster not working

Check Point community forum

May 20, 2012, 09:39:37 PM

Welcome, Guest. Please login or register.
Did you miss your activation email?

News:

Home

Forum

Help

User

Welcome, Guest. Please login or register.
Did you miss your activation email?
May 20, 2012, 09:39:37 PM

Articles

[Nokia] User ends up in clish immediately after login by juve
Put your company logo on Integrity interface by juve
ftp : Active command received while working in Passive mode by juve
How to enable the VPN accelerator on Nokia by juve
Routes not surviving a reboot on SecurePlatform by juve

Check Point community forum > Forum > Perimeter security > VPN-1 Edge > VPN tunnel between a VPN-1 edge and a Check Point cluster not working

Pages: [1]

« previous next »

Author

Topic: VPN tunnel between a VPN-1 edge and a Check Point cluster not working (Read 592 times)

juve

Administrator
Jr. Member

Posts: 92

VPN tunnel between a VPN-1 edge and a Check Point cluster not working

« on: January 01, 2008, 12:08:01 PM »

I had a problem lately with a VPN tunnel from a VPN-1 edge not working to a central cluster on NGX R65. Central management of the edge was working fine and the tunnel negotiations were starting and arriving at the right address. Nevertheless, I received a malformed packet error and the tunnel setup didn't complete. After searching deeper, the problem was an incorrect definition of the central cluster. In NGX (and also NG R55), always make sure the topology and ClusterXL properties are defined correctly. Fill out the entire cluster topo with cluster addresses and choose the correct clusterxl method, as it is very important.

After correcting the topology and pushing the policy, the VPN was up in seconds.