Checkpoint Site-to-Site VPN with Hairpinning (VSX R80.20)

chafik — Thu, 07 Apr 2022 13:23:05 GMT

Hi
I have 2 VPN IPSEC with between my Checkpoint FW and 2 Interoperable devices.

I'd like the remote subnet to communicate through my FW .

For example:

Encryption Domain    CKPT:    5.5.5.0/24
Encryption Domain   FW-Remote-1:   1.1.1.0/24
Encryption Domain   FW-Remote-2:   2.2.2.0/24

VPN1 : CKPT and FW-Remote-1 (5.5.5.0/24 - 1.1.1.0/24)

VPN2 : CKPT and FW-Remote-2 (5.5.5.0/24 - 2.2.2.0/24)

I would like the subnet 1.1.1.0/24 to communicate with 2.2.2.0/24 through my CKPT.

I found exactly what I want in cisco site:

But it's for cisco, and I didn't find anything with CKPT.

Do you know if it's possible?

Regards

Re: Checkpoint Site-to-Site VPN with Hairpinning (VSX R80.20)

_Val_ — Thu, 07 Apr 2022 14:51:23 GMT

Yes, it is possible through Star VPN community. Please refer to VPN guide for details.