VPN CP NG FP3 - Nortel Contivity

[steveave]

My CP NG FP3 initiates the IKE negotiation fine – Checkpoint logs the following error when the Nortel Contivity, at the other end, responds: 'Quick Mode Received Notification from Peer: Invalid ID information'. The 'invalid id information' is also logged in the ike.elg & vpnd.elg with debugging cranked up. I can find no reference to what 'ID' this is referencing.

I have checked all the normal stuff - same subnets for encryption domains, NATing off between the private subnets, same 3DES, MD5 and D-H 2 on both sides (on the objects and the encryption rules), Checkpoint KB, Phoneboy & general web searches.

Any ideas would be greatly appreciated.

 

[steveave]

The ‘Invalid ID’ refers to the pre-defined networks of the interoperable network device. Once I added the specific networks (unlike my other interoperable devices) for the Contivity all was well.