[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sidewinder
Subject:    RE: [Sidewinder] Re: PLEASE HELP sidewinder problem
From:       sidewinder-admin () adeptech ! com
Date:       2003-04-18 14:51:38
[Download RAW message or body]

You might want to try the "set id-mode ike subnet" 
command on the Netscreen.

In my VPNs from Sidewinder to Netscreen, the
netscreens are set to "set ike id-mode subnet".

You may also need to set "unset ike policy-checking"
on the Netscreen.

From the Netscreen docs

"
set id-mode { ike ip | subnet } 

Defines the IKE ID mode in the Phase 2 exchange as
either a host (IP) address or a gateway (subnet). If you
choose ip, no Phase 2 ID is sent. If you choose subnet,
proxy Phase 2 IDs are sent. (Use IP when setting up a
VPN tunnel between a NetScreen device and a
CheckPoint 4.0 device. Otherwise, use the subnet
option.)
"

- Jim McDonald


>-----Original Message-----
>From: sidewinder-admin@adeptech.com 
>[mailto:sidewinder-admin@adeptech.com] 
>Sent: Wednesday, April 16, 2003 8:45 PM
>To: sidewinder@adeptech.com
>Subject: [Sidewinder] Re: PLEASE HELP sidewinder problem
>
>
>
>I'm trying to vpn between an sidewinder cobra s/w 52003 and a Netscreen
>500 os 4.02r2.
>
>Phase 1 is OK but in phase 2 the sidewinder comes back invaild id
>info.
>
>I cant seem to find what id it wants from the netscreen.
>
>CAN YOU PLEASE HELP ME.
>
>ted gibson
>Grant County PUD
>925 366-955  
>
>
>**********************************************************************
>This email and any files transmitted with it are confidential and
>intended solely for the use of the individual or entity to whom they
>are addressed. If you have received this email in error please notify
>the sender.
>
>This footnote also confirms that this email message has been 
>scanned for the presence of computer viruses.
>
>**********************************************************************
>
>_______________________________________________
>Sidewinder mailing list
>Sidewinder@adeptech.com
>http://mail.adeptech.com/mailman/listinfo/sidewinder
>

_______________________________________________
Sidewinder mailing list
Sidewinder@adeptech.com
http://mail.adeptech.com/mailman/listinfo/sidewinder
[prev in list] [next in list] [prev in thread] [next in thread]