VPN - Netscreen 5GT vs. Symantec Enterprise Firewall 7.04

Author

Netscreen 5GT vs. Symantec Enterprise Firewall 7.04

Johan

2005-07-21, 5:48 pm

Hi there...

Having problems with connecting a Netscreen 5GT to a SEF (Symantec
Enterprise Firewall).

Phase 1 is going correctly (either main or aggressive mode), but Phase 2
gives an error
IKE<xxx.xxx.xxx.xxx>: Received a notification message for DOI <1> <18>
<INVALID_ID_INFO>

SYN Flood is disabled at both sides...

Local site (Netscreen 5GT):
192.168.75.0/24 (Private) and 80.127.xxx.xxx/32 public
Tunnel and policy (bi-directional created for full access) created

Remote site (SEF 7.04):
192.6.181.0/24 (private) and 194.151.xxx.xxx/32 public

Please help

Please HELP........

Jean-Michel R. Duthoo

2005-07-22, 5:47 pm

[...]

> IKE<xxx.xxx.xxx.xxx>: Received a notification message for DOI <1> <18>
> <INVALID_ID_INFO>
>
>
> SYN Flood is disabled at both sides...
>
> Local site (Netscreen 5GT):
> 192.168.75.0/24 (Private) and 80.127.xxx.xxx/32 public
> Tunnel and policy (bi-directional created for full access) created
>
> Remote site (SEF 7.04):
> 192.6.181.0/24 (private) and 194.151.xxx.xxx/32 public
>

So, you should debug phase II then....

[...]