topic Re: R77.30 VPN to AWS - Manually defined encryption domain (subnet clash) in Cloud Firewall

R77.30 VPN to AWS - Manually defined encryption domain (subnet clash)

Denis_Clancy — Fri, 19 Jan 2018 10:09:11 GMT

Hi Folks,

I was hoping you could help me out with a query. I'm in the process of setting up a VPN to Amazon AWS. Following the checkpoint guide below.

Solution ID: sk100726

How to configure IPsec VPN tunnel between Check Point Security Gateway and Amazon Web Services VPC using static routes

I had a question around the statement below:

What needs to be done in the instance that a local network that will be served by the AWS VPN is already defined manually as part of another existing VPN domain on the R77.30 cluster?

I am unable to remove it from the existing VPN domain as per the instruction because the local subnet will continue to require access via the existing VPN.

Thanks in advance guys.

Re: R77.30 VPN to AWS - Manually defined encryption domain (subnet clash)

Vladimir — Fri, 19 Jan 2018 19:00:45 GMT

You can try some of the solutions listed here:

Troubleshooting Overlapping Encryption Domains Issues

If I recall correctly, I've used some crazy NAT rules to phantom objects to overcome similar issue.

Re: R77.30 VPN to AWS - Manually defined encryption domain (subnet clash)

Denis_Clancy — Mon, 22 Jan 2018 09:48:55 GMT

Thank Vladimir, I'll dig through that article.

Denis