Have setup a 3rd party VPN to a checkpoint ngai r55 system and the peer is
displaying the following error.

checkpoint error: ip: quick mode sent notification no subnet in ike
negotiations.
BM error: recieved notify message type 18 from 2.2.2.2

When BM initiates the checkpoint system thinks we are sending a subnet
request rather than host request. If the checkpoint system initiates the
vpn comes up without problems. Has anybody else seen this type of
behaviour?

our system is NW6.5 SP3 BM3.8 sp3

8-2-2007 4:51:12 pm Start IKE-SA 4718E800 -
Initiator,src=1.1.1.1,dst=2.2.2.2,TotSA=2
8-2-2007 4:51:12 pm AUTH ALG IS 1
8-2-2007 4:51:12 pm ***Send Main Mode message to 2.2.2.2
8-2-2007 4:51:12 pm
I-COOKIE=69C84D711D931844,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=1280297772
8-2-2007 4:51:12 pm ***Receive Main Mode message from 2.2.2.2
8-2-2007 4:51:12 pm
I-COOKIE=69C84D711D931844,R-COOKIE=7A62998A67C2A5F8,MsgID=0,1stPL=SA-PAYLOAD,state=1280297772
8-2-2007 4:51:12 pm IKE SA NEGOTIATION: Peer lifetime = 28800 My
lifetime=28800
8-2-2007 4:51:12 pm ****DH private exponent size is 1016****
8-2-2007 4:51:12 pm Local server's interfaces : 192.168.13.70
8-2-2007 4:51:12 pm Local server's interfaces : 1.1.1.1
8-2-2007 4:51:12 pm ***Send Main Mode message to 2.2.2.2
8-2-2007 4:51:12 pm
I-COOKIE=69C84D711D931844,R-COOKIE=7A62998A67C2A5F8,MsgID=0,1stPL=KEY-PAYLOAD,state=1280297824
8-2-2007 4:51:12 pm ***Receive Main Mode message from 2.2.2.2
8-2-2007 4:51:12 pm
I-COOKIE=69C84D711D931844,R-COOKIE=7A62998A67C2A5F8,MsgID=0,1stPL=KEY-PAYLOAD,state=1280297824
8-2-2007 4:51:12 pm ****SKEYID***secret***
8-2-2007 4:51:12 pm 63306666 33336375 70746F64 61792020
8-2-2007 4:51:12 pm *Sending MM id payload IPSEC_ID_IPV4_ADDR 1.1.1.1
8-2-2007 4:51:12 pm *protocol 0 portnum 0 length 8
8-2-2007 4:51:12 pm Sending INITIAL_CONTACT notify to 2.2.2.2
8-2-2007 4:51:12 pm ***Send Main Mode message to 2.2.2.2
8-2-2007 4:51:12 pm
I-COOKIE=69C84D711D931844,R-COOKIE=7A62998A67C2A5F8,MsgID=0,1stPL=ID-PAYLOAD,state=1280297836
8-2-2007 4:51:12 pm ***Receive Main Mode message from 2.2.2.2
8-2-2007 4:51:12 pm
I-COOKIE=69C84D711D931844,R-COOKIE=7A62998A67C2A5F8,MsgID=0,1stPL=ID-PAYLOAD,state=1280297836
8-2-2007 4:51:12 pm Recieved MM ID payload type 1 protocol 0 portnum 0
length 8
8-2-2007 4:51:12 pm *Received MM ID ID_IPV4_ADDR 2.2.2.2
8-2-2007 4:51:12 pm IKE : Not an NMAS user use default traffic rule
8-2-2007 4:51:12 pm Final IKE (phase 1) SA lifetime is 28800 secs
8-2-2007 4:51:12 pm IKE-SA is created. rekey time = 21600
encr=5,hash=2,auth=1,lifesec=28800
8-2-2007 4:51:12 pm dst=2.2.2.2,time=100285
8-2-2007 4:51:12 pm *Sending proxy ID type 4 10.10.10.10/255.255.255.255
8-2-2007 4:51:12 pm *Sending proxy ID type 4 20.20.20.20/255.255.255.255
8-2-2007 4:51:12 pm ***Send Quick Mode message to 2.2.2.2
8-2-2007 4:51:12 pm
I-COOKIE=69C84D711D931844,R-COOKIE=7A62998A67C2A5F8,MsgID=1C376C0C,1stPL=HASH-PAYLOAD,state=1280297884
8-2-2007 4:51:12 pm ***Receive Unacknowledge Informational message from
2.2.2.2
8-2-2007 4:51:12 pm
I-COOKIE=69C84D711D931844,R-COOKIE=7A62998A67C2A5F8,MsgID=FC0A6AFC,1stPL=HASH-PAYLOAD,state=1280297884
8-2-2007 4:51:12 pm Recieved notify message type 18 from 2.2.2.2
8-2-2007 4:51:12 pm Notify Recvd :Packet could have corrupted on the way
,retransmit to 2.2.2.2
8-2-2007 4:51:12 pm ***Send Quick Mode message to 2.2.2.2
8-2-2007 4:51:12 pm
I-COOKIE=69C84D711D931844,R-COOKIE=7A62998A67C2A5F8,MsgID=1C376C0C,1stPL=HASH-PAYLOAD,state=1280297884
8-2-2007 4:51:12 pm IKE-SA 4718E140 is
Deleted,I-COOKIE=3C34C42B,R-COOKIE=2FA7867D,dst=2.2.2.2
8-2-2007 4:51:12 pm State:3 Cond:4 TimerEvent:3
8-2-2007 4:51:12 pm lifetime :28800 sec Rekey Time :21600 sec
8-2-2007 4:51:12 pm Created at :5538 sec Remaining life time :28768 sec
Current time 5571
8-2-2007 4:51:18 pm ***Send Quick Mode message to 2.2.2.2
8-2-2007 4:51:18 pm
I-COOKIE=69C84D711D931844,R-COOKIE=7A62998A67C2A5F8,MsgID=1C376C0C,1stPL=HASH-PAYLOAD,state=1280297884
8-2-2007 4:51:28 pm ***Send Quick Mode message to 2.2.2.2
8-2-2007 4:51:28 pm
I-COOKIE=69C84D711D931844,R-COOKIE=7A62998A67C2A5F8,MsgID=1C376C0C,1stPL=HASH-PAYLOAD,state=1280297884
8-2-2007 4:51:43 pm IKEQMTimeoutHandler: Packet retransmit exceeded the
limit! the SA will be deleted
8-2-2007 4:51:43 pm ***Receive Quick Mode message from 2.2.2.2