https://community.checkpoint.com/t5/Firewall-and-Security-Management/IPsec-VPN-Initiator/m-p/173495#M31549 <P>I assume your Spokes have dynamic IPs (DAIP) and your HUB has a static IP. So only the Spoke know who to contact at which IP thus you never see the HUB initiating the VPN.</P> Fri, 03 Mar 2023 11:52:26 GMT Danny 2023-03-03T11:52:26Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/IPsec-VPN-Initiator/m-p/173169#M31466 <P>Hello,</P><P>I have Hub and Spoke Site to Site topology (both manged by same central management)<BR />I am trying to understand, why always only the spokes initates of tunnel creation?</P><P>I never saw that HUB was the&nbsp;initator.</P> Wed, 01 Mar 2023 11:57:38 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/IPsec-VPN-Initiator/m-p/173169#M31466 leonid1890 2023-03-01T11:57:38Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/IPsec-VPN-Initiator/m-p/173495#M31549 <P>I assume your Spokes have dynamic IPs (DAIP) and your HUB has a static IP. So only the Spoke know who to contact at which IP thus you never see the HUB initiating the VPN.</P> Fri, 03 Mar 2023 11:52:26 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/IPsec-VPN-Initiator/m-p/173495#M31549 Danny 2023-03-03T11:52:26Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/IPsec-VPN-Initiator/m-p/173496#M31550 <P>Duplicate thread?</P> <P><A href="https://community.checkpoint.com/t5/Security-Gateways/IPsec-VPN-Initiator/td-p/173194#M31481" target="_blank">https://community.checkpoint.com/t5/Security-Gateways/IPsec-VPN-Initiator/td-p/173194#M31481</A></P> Fri, 03 Mar 2023 12:08:25 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/IPsec-VPN-Initiator/m-p/173496#M31550 Chris_Atkinson 2023-03-03T12:08:25Z