topic S2S VPN Azure-On Prem SMB Cluster with Smart1 Cloud in Firewall & Security Management

S2S VPN Azure-On Prem SMB Cluster with Smart1 Cloud

blackhill20 — Tue, 28 Jan 2025 22:53:34 GMT

Hi Guys,

so my setup is as follow everything is managed via Smart1-Cloud Management.

So On-Prem we have a 1900 SMB Cluster and on Azure we have one Cloudguard Gateway with some Web Ressources.

Azure Frontend eth0 10.21.0.4 - ping is working from clish to internet no problem.

Backend eth1 10.21.1.0/24

Now i did try to configure a Remote Access Community with both the Cluster and the Azure GW.

Encryption i left on Default and for Tunnel Management VPN per subnet pair.

VPN Domain for Cluster is LAN and for Azure-GW it is 10.21.0.0/16

Disable NAT inside VPN Communities is also checked.

What ever combination of Encrytion or Domain i tried i cant establish the tunnel.

Does anybody has an idea? Im getting out of Ideas.

Thank you very much in Advance for your time.

Re: S2S VPN Azure-On Prem SMB Cluster with Smart1 Cloud

PhoneBoy — Wed, 29 Jan 2025 00:38:12 GMT

What is the precise error message(s) received in the logs?

Re: S2S VPN Azure-On Prem SMB Cluster with Smart1 Cloud

blackhill20 — Wed, 29 Jan 2025 07:10:47 GMT

In the Liogs everything seems accepted But when i make a vpn tu tlist the peer TS looks like a different one(172…. subnet) . You Need the Logs from Ike.elg?

Re: S2S VPN Azure-On Prem SMB Cluster with Smart1 Cloud

PhoneBoy — Thu, 30 Jan 2025 03:15:29 GMT

Additional debug would certainly help.
https://support.checkpoint.com/results/sk/sk62482