VPN - 4..1 to NG

[JakeHere]

I am sure I am not the first to want to do this, but I am a little lost. Please HELP! I have setup half a dozen vpn's and all have been checkpoint Firewall 4.1 to CP Firewall 4.1. (all working fine) Now I am trying one from 4.1 to NG. If the connection is initiated from the NG side it works perfectly. However, if I try to initate the connection from the 4.1 side I get "IKE LOG: received notification from peer: invalid exchange type" the I get the error "encryption failure : no response from peer".

I have checked all encryption schemes etc and all are seem fine.

Any ideas would be helpful.

 

[brianpaterson]

Have you checked that you are using the same IKE phase 1 settings for Diffie Helman. the error suggests a key exchange error. B-)
Brian, CCSE
brian@domain-integrity.com