topic Re: Checkpoint device does not establish VPN tunnel in Firewall and Security Management

Checkpoint device does not establish VPN tunnel

lucascaetano9 — Fri, 03 May 2019 23:53:14 GMT

Hello all,

I am getting issues when trying to configure VPN tunnels in my R77.20. I have tried to connect to ASA, FORTINET and Pfsense as well. As I dont know to much regarding the log of this kind of feature, I would like your help on some advice about this.

Are there some directory or folder that I can see evidences or issue of the connection?

Obs: I dont have a blade license to check in monitor and another tools in smartcenter.

Re: Checkpoint device does not establish VPN tunnel

PhoneBoy — Sat, 04 May 2019 04:45:17 GMT

SmartView Tracker and/or SmartLog should show evidence of this.
See also: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk34467

Re: Checkpoint device does not establish VPN tunnel

HeikoAnkenbrand — Sat, 04 May 2019 06:13:23 GMT

Tip:

- use IKEv1

- use lower DH groups for example 5

- use main mode

- check first with PSK

- check same phase 1 and phase 2 settings

- check supernet issues

- check encryption domains on both sides

- Update your firewall to a supported version R80.20 with vpn multicore support. R77.20 is out of support😀.

- use „vpn tu“ to check phase 1 and phase 2

- enable the vpn debug and use the ikeview tool to debug vpn issues

Re: Checkpoint device does not establish VPN tunnel

HeikoAnkenbrand — Sat, 04 May 2019 06:18:30 GMT

See more -> What is the IKEView utility?

sk30994

Re: Checkpoint device does not establish VPN tunnel

HeikoAnkenbrand — Sat, 04 May 2019 06:24:25 GMT

Or see this SK:

VPN Site-to-Site with 3rd party

Re: Checkpoint device does not establish VPN tunnel

lucascaetano9 — Mon, 06 May 2019 16:45:54 GMT

The issue Advanced Access is required is being shown even I am logged with my costumer credentials, but anyway, thanks for your recomendation!