Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Juancho
Contributor

VPN with 3rd party - Scenario 3 - Implicit inclusion of external addresses

Have applied the mentioned solution on an R80.40 manager with R80.40 gws (take 91)

 

Unfortunately i still see the external addresses trying to be negotiated by the checkpoint

My $FWDIR/lib/crypt.def looks like in the attached screenshot, dst ip addresses are remote peers.

 

Policy pushes fine but the TSi, TSr still wrong. Yes, IKEv2 btw.

 

 

Any ideas?


Cheers

 

 
 

 

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

Recommend a TAC case here.

0 Kudos