VPN between ZyWall and Checkpoint

alex_ch · 06-27-2005, 07:31 AM

Hi,

I must connect my ZyWall 35 to a CheckPoint. Currently, my ZyWall connects, but we can exchange data (no ping, no connection, nothing...)

In the log file, I've the following error :
[ID] : Rule [Name] Verifying Remote ID failed :
Recv ID: SINGLE, [xxx.xxx.xxx.xxx]
vs. My Remote [192.168.0.0]-[255.255.0.0]
(where xxx.xxx.xxx.xxx is the public address of the Checkpoint)

I've tried to change the Remote network parameters with the IP address. The log said me :
[ID] : Rule [Name] Verifying Remote ID failed :
Recv ID: SUBNET, [192.168.0.0]-[255.255.0.0]
vs. My Remote [xxx.xxx.xxx.xxx]-[xxx.xxx.xxx.xxx]

Do you have an idea ? Thanks for your help.

Alex

Main parameters of the ZyWall :
** Gateway **
IKE Proposal :
Negotiation mode : Main
Encryption algorithm : 3DES
Authentication algorithm : MD5
SA Life time : 28800
Key group : DH2

** Policy **
Local network : my subnet
Remote network : remote subnet
IPSec proposal :
Encapsulation mode : Tunnel
Active protocol : ESP
Encryption algorithm : 3DES
Authentication algorithm : MD5
SA Life time : 28800
Perfect forward secrecy : None

**JamesO** · 06-28-2005, 04:51 AM

User name and password issue??

Don't know much about this gear.

What make and model do you have?

JamesO

alex_ch · 06-28-2005, 05:00 AM

For my side, it's a Zyxel Zywall 35

For other side, it's a Nokia IP530 running Checkpoint NG AI R55

**JamesO** · 06-28-2005, 06:05 AM

"Verifying Remote ID failed" appears to be something I would focus in on.

Again, verify user name and password. Maybe the problem is with the Nokia that it needs to be properly configured with User Name and Password to match your end?

JamesO

pseudoblue · 10-25-2005, 06:09 AM

Hello, I configured a zywall35 with this problem and manage to solve it..
I had the same error message "verifying remote ID failed".

The problem was to configure the "Address Type" for the VPN rule (Local Network & Remote Network), make sure that the settings you configured either SUBNET, SINGLE or RANGE is the same with the remote network you are connecting.

06-27-2005, 07:31 AM	#1 (permalink)
alex_ch Registered User Join Date: Jun 2005 Posts: 2 OS: 2000	VPN between ZyWall and Checkpoint Hi, I must connect my ZyWall 35 to a CheckPoint. Currently, my ZyWall connects, but we can exchange data (no ping, no connection, nothing...) In the log file, I've the following error : [ID] : Rule [Name] Verifying Remote ID failed : Recv ID: SINGLE, [xxx.xxx.xxx.xxx] vs. My Remote [192.168.0.0]-[255.255.0.0] (where xxx.xxx.xxx.xxx is the public address of the Checkpoint) I've tried to change the Remote network parameters with the IP address. The log said me : [ID] : Rule [Name] Verifying Remote ID failed : Recv ID: SUBNET, [192.168.0.0]-[255.255.0.0] vs. My Remote [xxx.xxx.xxx.xxx]-[xxx.xxx.xxx.xxx] Do you have an idea ? Thanks for your help. Alex Main parameters of the ZyWall : Gateway IKE Proposal : Negotiation mode : Main Encryption algorithm : 3DES Authentication algorithm : MD5 SA Life time : 28800 Key group : DH2 Policy Local network : my subnet Remote network : remote subnet IPSec proposal : Encapsulation mode : Tunnel Active protocol : ESP Encryption algorithm : 3DES Authentication algorithm : MD5 SA Life time : 28800 Perfect forward secrecy : None

06-28-2005, 04:51 AM	#2 (permalink)
JamesO Join Date: Mar 2005 Location: Fairfax, VA USA Posts: 2,289 OS: 98SE, W2k Pro, XP Pro	User name and password issue?? Don't know much about this gear. What make and model do you have? JamesO

06-28-2005, 05:00 AM	#3 (permalink)
alex_ch Registered User Join Date: Jun 2005 Posts: 2 OS: 2000	For my side, it's a Zyxel Zywall 35 For other side, it's a Nokia IP530 running Checkpoint NG AI R55

06-28-2005, 06:05 AM	#4 (permalink)
JamesO Join Date: Mar 2005 Location: Fairfax, VA USA Posts: 2,289 OS: 98SE, W2k Pro, XP Pro	"Verifying Remote ID failed" appears to be something I would focus in on. Again, verify user name and password. Maybe the problem is with the Nokia that it needs to be properly configured with User Name and Password to match your end? JamesO

10-25-2005, 06:09 AM	#5 (permalink)
pseudoblue Registered User Join Date: Oct 2005 Posts: 1 OS: WinXP	Hello, I configured a zywall35 with this problem and manage to solve it.. I had the same error message "verifying remote ID failed". The problem was to configure the "Address Type" for the VPN rule (Local Network & Remote Network), make sure that the settings you configured either SUBNET, SINGLE or RANGE is the same with the remote network you are connecting.