Subject: Re: 1.6.1 VPN connections
To: John Nemeth <>
From: Werner Backes <>
List: current-users
Date: 10/10/2003 19:58:40
Hi John,

John Nemeth wrote:

>Sanitised configs are below for the connection to the Sonicwall (note
>that it likes 24 hour SA timeouts).

But you specify 24hours for ALL timeouts, not just for SA which is 
probably not correct.
I had problems like yours with a connection to Checkpoint FW-1 for some 
Then I discovered that it works much better not to set any timeouts at 
all and let both partys
negotiate them.