https://community.checkpoint.com/t5/Firewall-and-Security-Management/S2S-VPN-behind-NAT-and-DAIP/m-p/247021#M48208 <P>Hi all,</P><P class="">I need to configure a temporary S2S VPN between Checkpoint appliances.</P><P class="">The new device will be behind a broadband connection with a dynamically assigned public IP address, which will be NATed to a private address.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="diagram.jpg" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/30288i12236483E5B19DA4/image-size/medium?v=v2&amp;px=400" role="button" title="diagram.jpg" alt="diagram.jpg" /></span></P><P> </P><P><SPAN>I am able to establish SIC connectivity between SMS and the remote gateway; however, when I try to generate traffic from the host, I am getting a message that says, 'VPN failed to resolve Gateway IP address.' Has anyone else had the same problem?</SPAN></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2025-04-22_17h09_50.jpg" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/30287i0E7F03E221D35EC5/image-size/medium?v=v2&amp;px=400" role="button" title="2025-04-22_17h09_50.jpg" alt="2025-04-22_17h09_50.jpg" /></span></P><DIV class="">&nbsp;</DIV><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="gw settings2.jpg" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/30289iDB2A7839F60AD828/image-size/medium?v=v2&amp;px=400" role="button" title="gw settings2.jpg" alt="gw settings2.jpg" /></span></P><P> </P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 22 Apr 2025 15:15:36 GMT lgodlewski 2025-04-22T15:15:36Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/S2S-VPN-behind-NAT-and-DAIP/m-p/247021#M48208 <P>Hi all,</P><P class="">I need to configure a temporary S2S VPN between Checkpoint appliances.</P><P class="">The new device will be behind a broadband connection with a dynamically assigned public IP address, which will be NATed to a private address.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="diagram.jpg" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/30288i12236483E5B19DA4/image-size/medium?v=v2&amp;px=400" role="button" title="diagram.jpg" alt="diagram.jpg" /></span></P><P> </P><P><SPAN>I am able to establish SIC connectivity between SMS and the remote gateway; however, when I try to generate traffic from the host, I am getting a message that says, 'VPN failed to resolve Gateway IP address.' Has anyone else had the same problem?</SPAN></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2025-04-22_17h09_50.jpg" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/30287i0E7F03E221D35EC5/image-size/medium?v=v2&amp;px=400" role="button" title="2025-04-22_17h09_50.jpg" alt="2025-04-22_17h09_50.jpg" /></span></P><DIV class="">&nbsp;</DIV><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="gw settings2.jpg" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/30289iDB2A7839F60AD828/image-size/medium?v=v2&amp;px=400" role="button" title="gw settings2.jpg" alt="gw settings2.jpg" /></span></P><P> </P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 22 Apr 2025 15:15:36 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/S2S-VPN-behind-NAT-and-DAIP/m-p/247021#M48208 lgodlewski 2025-04-22T15:15:36Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/S2S-VPN-behind-NAT-and-DAIP/m-p/247046#M48212 <P>Version/JHF of all relevant components here.<BR />Have you successfully pushed policy to this remote DAIP gateway?<BR />What side of the VPN is initiating the connection?<BR />Typically, this should be done from the DAIP gateway side.</P> Tue, 22 Apr 2025 20:41:19 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/S2S-VPN-behind-NAT-and-DAIP/m-p/247046#M48212 PhoneBoy 2025-04-22T20:41:19Z