topic Re: Site to Site VPN routing in SD-WAN

Site to Site VPN routing

Ganz_Montejo — Wed, 21 Jun 2023 09:06:05 GMT

Hey! first time user of R80.20 here. I have a site to site VPN tunnel with remote sites H1 and H2 (they are in the same tunnel). These host are on a separate network. 239.x and 243.x. Now, my devices can access H2 but cant access H1. This following error (Missing OS Route) keeps coming up with devices while trying access H1. What are the things should I check out?

Re: Site to Site VPN routing

G_W_Albrecht — Wed, 21 Jun 2023 10:55:07 GMT

What is your SD-WAN config ? This is posted under CheckMates > Products > Quantum > SD-WAN

Also, R80.20 is out of support since some time - or do you talk about Quantum Spark R80.20.x0 ? Topology drawing could be helpfull !

Re: Site to Site VPN routing

Ganz_Montejo — Thu, 22 Jun 2023 02:09:08 GMT

This is an old appliance that is repurposed to only be used for as a gateway for asite to site VPN. Here's the diagram

Re: Site to Site VPN routing

PhoneBoy — Thu, 22 Jun 2023 17:31:55 GMT

Are you really using 239.x and 243.x addresses?
That's the multicast address space and the error message corresponds to missing configuration: https://support.checkpoint.com/results/sk/sk176868
If you're not using this address space for actual multicast traffic, use different IP addresses.
If you're using this for actual multicast traffic, then configure the appliance accordingly with PIM.