topic Re: SMB VPN SITE TO SITE in Firewall and Security Management

SMB VPN SITE TO SITE

AfterMath — Mon, 12 Jun 2023 16:00:29 GMT

Hi Guys!

Could you please give help about configuring vpn site to site .... im having a problem in comunication, can not ping or talk each other!

But the tunnel is active/up

SMB 1600Series and 700Series appliance. R80 & R70

Re: SMB VPN SITE TO SITE

PhoneBoy — Mon, 12 Jun 2023 23:06:57 GMT

We need a lot more information about the configuration and troubleshooting done in order to assist here.
Meanwhile, review: https://support.checkpoint.com/results/sk/sk112213

Re: SMB VPN SITE TO SITE

AfterMath — Mon, 19 Jun 2023 15:04:06 GMT

Thanks for your feedback @phonethit

The Site to Site VPN is based on static public Ip address between the two SMB appliances ( 1600 & 750 )

These were the configuration between the two sides!

Encryption default;

Advanced ( permanent link enabled; Certificate any trust )

Practically these were the steps! Some times the link is Up but not working, no ping, nothing!

Re: SMB VPN SITE TO SITE

G_W_Albrecht — Mon, 19 Jun 2023 15:16:04 GMT

Engage with TAC in a quick Chat to get this resolved asap !

Re: SMB VPN SITE TO SITE

AfterMath — Mon, 19 Jun 2023 19:09:09 GMT

Thanks for your feedback @PhoneBoy

The Site to Site VPN is based on static public Ip address between the two SMB appliances ( 1600 & 750 )

These were the configuration between the two sides!

Encryption default;

Advanced ( permanent link enabled; Certificate any trust )

Practically these were the steps! Some times the link is Up but not working, no ping, nothing!

Re: SMB VPN SITE TO SITE

AfterMath — Mon, 19 Jun 2023 19:09:58 GMT

Thanks for your feedback @G_W_Albrecht

Re: SMB VPN SITE TO SITE

AfterMath — Mon, 19 Jun 2023 19:17:32 GMT

@PhoneBoy @G_W_Albrecht The license in one side isfor a while a trial, is that a problem!?

Re: SMB VPN SITE TO SITE

G_W_Albrecht — Tue, 20 Jun 2023 07:30:18 GMT

Should work.

Re: SMB VPN SITE TO SITE

Tom_Hinoue — Tue, 20 Jun 2023 08:02:47 GMT

Wow the CP750 WEB UI looks very old which I think the firmware is possibly older than R77.20.51.

Have you tried upgrading the firmware to R77.20.87 latest build for CP750?
I know there are tons of fixes for VPN since < R77.20.51 that might help resolve your issue, compatibility as well.

Also be sure to use the latest version for CP1600 as possible 🙂

Re: SMB VPN SITE TO SITE

AfterMath — Tue, 20 Jun 2023 11:00:46 GMT

Hi Guys!

I reinitialize the VPN certificates on booth sides, exported the certificates an import/add them on trusted VPN certificates ( Site A on Site B and Site B on Site A ), and installed them in Certificate Matching on advanced mode of each Site..

Site A to Site B the tunnel is up and working....

Here i have from Site A, the name and the peer address...

Site B to Site A the tunnel is up and IS NOT working...

Here i have from Nothing (Blank), Site name and peer address...

The issues is that the Site B is not communicating with Site A..!