topic Re: need to make vpn in Firewall and Security Management

need to make vpn

sivareddy2611 — Wed, 25 May 2022 22:16:22 GMT

TASK-1:

Establish the VPN between FW5 PC3 and Site1-FW3 PC1

Verification:

Ping from PC3 to PC1
Ping reply should be come and packet should be encrypted in Smart view Tracker.

TASK-2:
Establish the VPN between FW5 PC3 and Site1-FW4 PC2

Verification:

Ping from PC3 to PC2
Ping reply should be come and packet should be encrypted in Smart view Tracker.

TASK-3:
Establish the VPN between FW5 PC3 and Site1-FW6 PC4

Verification:

Ping from PC3 to PC4
Ping reply should be come and packet should be encrypted in Smart view Tracker.

Note:

i tried as shown below youtube video link but not worked

https://www.youtube.com/watch?v=mYgOztne_Gg&t=13s

please help me someone on this i am trying from last one week

Re: need to make vpn

PhoneBoy — Thu, 26 May 2022 00:39:36 GMT

Version/JHF of components in question?
What is the precise configuration on each gateway in terms of the encryption domain?
Are all gateways in the same VPN community?
What precise errors are you seeing in SmartView?

Re: need to make vpn

sivareddy2611 — Thu, 26 May 2022 00:45:12 GMT

Version r77 and all gateways are in same vpn community,

Task are mentioned in the question and when i try as shown in the YouTube video link , i am able to ping pc3 to pc1 but i am not getting logs in pc3 and the ping should encrypt with vpn

Re: need to make vpn

the_rock — Thu, 26 May 2022 01:13:57 GMT

You can use vpn admin guide and follow info to set up vpn tunnel. Once up, then if traffic is not going through, more debugs can be done

vpn debug trunc

vpn debug ikeon

vpn debug ikeoff

get $FWDIR.log ike.elg and vpnd files

Andy

Re: need to make vpn

sivareddy2611 — Thu, 26 May 2022 03:21:52 GMT

What does it mean can you explain more clearly?

What about the YouTube video is that correct

Re: need to make vpn

Raj9 — Thu, 28 Sep 2023 07:55:43 GMT

Can you complete this task? If you complete then please help me how will you do this

Re: need to make vpn

Tal_Paz-Fridman — Thu, 28 Sep 2023 08:20:55 GMT

Please start with the following guide to setup simple Site to Site VPN:

Check Point for Beginners > Network Security

https://community.checkpoint.com/t5/Check-Point-for-Beginners/Site-to-Site-VPN-in-R80-x-Tutorial-for-Beginners/ba-p/89192?cat=2

Or use Site to Site VPN R81.20 Administration Guide:

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SitetoSiteVPN_AdminGuide/Content/Topics-VPNSG/Getting-Started.htm?tocpath=_____5#Getting_Started_with_Site-to-Site_VPN

Re: need to make vpn

Raj9 — Fri, 29 Sep 2023 06:15:56 GMT

As outside firewall have same network it will be treated as private network so we have to do natting. But i didn't understand how to do natting. And after natting the private network will be known by public ip address so in console site which ip address is used to create vpn external gateway and which ip address is used to create other side network for vpn domain

Re: need to make vpn

Raj9 — Tue, 03 Oct 2023 07:28:10 GMT

Can you please tell me how will you able to ping pc3 to pc1

Re: need to make vpn

PhoneBoy — Tue, 03 Oct 2023 14:52:07 GMT

Local encryption domain should always include local addresses (without NAT) of systems that will communicate over VPN tunnels.
Remote encryption domain will include the NAT addresses needed by the local systems to reach the remote systems.

Re: need to make vpn

Raj9 — Wed, 04 Oct 2023 06:24:54 GMT

Hello sir,

I understand what you want to say but i didn't understand how to do this so can you please explain more what wiil be the steps to make vpn end to end connectivity by using natting.

Re: need to make vpn

the_rock — Wed, 04 Oct 2023 10:06:10 GMT

Its exactly how it works with any firewall vendor when it comes to VPN S2S tunnels...so you put LOCAL addresses as @PhoneBoy said in your CP fw enc. domain and as far as remote, that VPN domain needs to included NAT-ed IPs required to communicate.

Andy

Re: need to make vpn

Lingesh — Mon, 17 Mar 2025 05:12:05 GMT

Sir can u explain how you achieve this and i am beginner i should finish this task can you plz provide some u tube source link or can u explain what to do in each phase and how many server and firewall(two - tier ) should to be installed

Re: need to make vpn

PhoneBoy — Mon, 17 Mar 2025 18:24:21 GMT

Aside from official documentation, we have something in Check Point for Beginners that might be useful: https://community.checkpoint.com/t5/Check-Point-for-Beginners/Site-to-Site-VPN-in-R80-x-Tutorial-for-Beginners/ba-p/89192?cat=2

Re: need to make vpn

the_rock — Mon, 17 Mar 2025 18:27:56 GMT

I would say what @PhoneBoy linked is good start. Setting us the tunnel is easy, but if it does not work, then you would need to troubleshoot (run debugs, examine the config, check logs, etc)

Check Point | 3rd Party Site to Site VPN - YouTube

Andy