[Sidewinder] Configuring GW2GW VPN between SideWinder 7andNetscreen 25

Tue Feb 3 14:12:26 EST 2009

-----Original Message-----
From: Sidewinder moderated discussion list <sidewinder at adeptech.com>
Sent: Tuesday, February 03, 2009 9:22 AM
To: sidewinder at adeptech.com <sidewinder at adeptech.com>
Subject: Re: [Sidewinder] Configuring GW2GW VPN between SideWinder 7and	Netscreen 25

Hi. 
I think i'm on the way. 
It seems that PFS, which is activated on the Netscreen, ist not supported 
anymore. 
So for now we are testing, if deactivating PFS does the trick. 

Thank you for all your replies till now. I will give feedback if i have
any further questions. 

best regards,

Carsten Müller
IT-Support (externer Mitarbeiter)

SauerBibus GmbH
Lise-Meitner-Ring 13
DE-89231 Neu-Ulm
Tel.: 0731 / 1896-171
eMail: nageladmin at sauerbibus.de

sidewinder-request at adeptech.com 
Gesendet von: sidewinder-bounces at adeptech.com
30.01.2009 18:00
Bitte antworten zu
sidewinder at adeptech.com

An
sidewinder at adeptech.com
Kopie

Thema
Sidewinder Digest, Vol 48, Issue 6

Send Sidewinder mailing list submissions to
sidewinder at adeptech.com

To subscribe or unsubscribe via the World Wide Web, visit
http://mail.adeptech.com/mailman/listinfo/sidewinder
or, via email, send a message with subject or body 'help' to
sidewinder-request at adeptech.com

You can reach the person managing the list at
sidewinder-owner at adeptech.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Sidewinder digest..."

Today's Topics:

1. Configuring GW2GW VPN between SideWinder 7 and       Netscreen 25
(Sidewinder moderated discussion list)
2. Re: Configuring GW2GW VPN between SideWinder 7       and     Netscreen
25 (Sidewinder moderated discussion list)

----------------------------------------------------------------------

Message: 1
Date: Fri, 30 Jan 2009 10:49:12 +0100
From: Sidewinder moderated discussion list <sidewinder at adeptech.com>
Subject: [Sidewinder] Configuring GW2GW VPN between SideWinder 7 and
Netscreen 25
To: sidewinder at adeptech.com
Message-ID:
<OF3EC88F7E.233F8188-ONC125754E.0035A5EC-C125754E.0035F175 at sauerbibus.de>

Content-Type: text/plain; charset="ISO-8859-1"

Hi.

We have the following problem.
We had a SideWinder G2 that we had configured to build a
Gateway-to-Gateway VPN with a NetScreen 25.
Lately we upgraded to SideWinder 7 and now this VPN Configuration does not
work anymore.

We configured the VPN as it is described in SecureComputings
Knowledgebase.

Has anyone Information about what has changed and needs to be reconfigured
so that this VPN works again?

Thank you.

best regards

Carsten M?ller
IT-Support (externer Mitarbeiter)

SauerBibus GmbH
Lise-Meitner-Ring 13
DE-89231 Neu-Ulm
Tel.: 0731 / 1896-171
eMail: nageladmin at sauerbibus.de

------------------------------

Message: 2
Date: Fri, 30 Jan 2009 11:14:47 -0500
From: Sidewinder moderated discussion list <sidewinder at adeptech.com>
Subject: Re: [Sidewinder] Configuring GW2GW VPN between SideWinder 7
and     Netscreen 25
To: "sidewinder at adeptech.com" <sidewinder at adeptech.com>
Message-ID: <C72475CA-E769-46B5-A44C-FCED3EC16592 at mimectl>
Content-Type: text/plain; charset="iso-8859-1"

You will need to take a close look at the audit log for VPNs.  You can do 
this using the command "showaudit -v > vpn.txt".  Then take a look at that 
text file with "less" or "more".  Then filter on the IP address of the 
Netscreen gateway and look for errors in the VPN negotiations.  You may 
need to increase logging verbosity by going to Policy --> Rule Elements 
--> Services --> isakmp.  Double click on that service and go to 
Properties.  You can change the audit level there.  Normal is generally 
good enough for me, unless I have a really troublesome VPN.  You might 
want to try Verbose. Debug will probably give you too much and make it had 
to track down what you need.  I would try it at the Normal level first.

--------------------
Matthew Harrell
Plex Systems
mhar at plex.com<mailto:mhar at plex.com>

________________________________
From: sidewinder-bounces at adeptech.com [sidewinder-bounces at adeptech.com] On 
Behalf Of Sidewinder moderated discussion list [sidewinder at adeptech.com]
Sent: Friday, January 30, 2009 4:49 AM
To: sidewinder at adeptech.com
Subject: [Sidewinder] Configuring GW2GW VPN between SideWinder 7 and 
Netscreen 25

Hi.

We have the following problem.
We had a SideWinder G2 that we had configured to build a
Gateway-to-Gateway VPN with a NetScreen 25.
Lately we upgraded to SideWinder 7 and now this VPN Configuration does not
work anymore.

We configured the VPN as it is described in SecureComputings
Knowledgebase.

Has anyone Information about what has changed and needs to be reconfigured
so that this VPN works again?

Thank you.

best regards

Carsten M?ller
IT-Support (externer Mitarbeiter)

SauerBibus GmbH
Lise-Meitner-Ring 13
DE-89231 Neu-Ulm
Tel.: 0731 / 1896-171
eMail: nageladmin at sauerbibus.de
_______________________________________________
Sidewinder mailing list
Sidewinder at adeptech.com
http://mail.adeptech.com/mailman/listinfo/sidewinder

------------------------------

_______________________________________________
Sidewinder mailing list
Sidewinder at adeptech.com
http://mail.adeptech.com/mailman/listinfo/sidewinder

End of Sidewinder Digest, Vol 48, Issue 6
*****************************************
_______________________________________________
Sidewinder mailing list
Sidewinder at adeptech.com
http://mail.adeptech.com/mailman/listinfo/sidewinder