[nsp] checkpoint & gre tunnel

[Ali Kemal Yurtseven]

	Hi,

	Increasing mtu size to 1524 on interfaces and ip mtu to 1500 on
tunnel interface solved the problem. Probably the problem occurred
because checkpoints were setting the df bit and rejecting icmp.

Ali Kemal Yurtseven
Network Engineer
Meteksan Net
Phone: +90 312 2979035
Fax    : +90 312 2979155

-----Original Message-----
From: Marcus Keane [mailto:mkeane at microsoft.com] 
Sent: Tuesday, August 05, 2003 11:46
To: Ali Kemal Yurtseven
Cc: cisco-nsp at puck.nether.net
Subject: RE: [nsp] checkpoint & gre tunnel

This may be your problem:

http://www.cisco.com/warp/public/105/56.html 

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Ali Kemal
Yurtseven
Sent: Tuesday, 5 August 2003 17:33
To: cisco-nsp at puck.nether.net
Subject: [nsp] checkpoint & gre tunnel

	Hi,

	I have a problem with vpn over gre tunnel. Topology is given
below:

	Checkpoint-> Router ------- GRE TUNNEL ------- Router ->
Checkpoint

	VPN is configured between the firewalls. Ping tests are fine,
but when a user tries to open a web page , problem occurs. Has anybody
experienced a problem like this ?

Ali Kemal Yurtseven
Network Engineer
Meteksan Net
Phone: +90 312 2979035
Fax    : +90 312 2979155


_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
http://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/