topic Inter VPN routing in Endpoint https://community.checkpoint.com/t5/Endpoint/Inter-VPN-routing/m-p/13561#M308 <HTML><HEAD></HEAD><BODY><DIV class=""><P><SPAN style="font-size: 12.0pt; color: black;">I'm working in a company where we are using a lot of S2S VPNs,</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">I follow some SKs but didn' found a real solution to my problem, basically :</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">we are routing traffic between 2 sites <SPAN style="background: white;">with VPNs&nbsp;&nbsp;</SPAN>(we are the HUB:H)&nbsp;</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">&nbsp;</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">S1-H-S2&nbsp; (S: Spoke)</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">&nbsp;</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">S1 : domain based vpn</SPAN></P><P style="margin-bottom: 12.0pt;"><SPAN style="font-size: 12.0pt; color: black;">S2 : Route Based vpn</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">t<STRONG>raffic from&nbsp;<SPAN style="background: white;">S2==&gt;H==&gt;S1 encrypted fwd properly on S1 vpn <SPAN style="color: #008000;">(no problem)</SPAN></SPAN></STRONG></SPAN></P><P><SPAN style="color: black; font-size: 12.0pt;"><STRONG>traffic from S1==&gt;H==&gt;S2 decrypted on H but <SPAN style="color: #ff0000;">not encrypted</SPAN></STRONG></SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">&nbsp;</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">try to follow sk116097 by adding dst-ip/nated ip on S2 GW doesn't help.</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">&nbsp;</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">Anyone have an idea/experience same issues.<BR /></SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">Thanks in advance for any help</SPAN></P></DIV></BODY></HTML> Thu, 06 Dec 2018 14:33:27 GMT e016012e-c965-4 2018-12-06T14:33:27Z Inter VPN routing https://community.checkpoint.com/t5/Endpoint/Inter-VPN-routing/m-p/13561#M308 <HTML><HEAD></HEAD><BODY><DIV class=""><P><SPAN style="font-size: 12.0pt; color: black;">I'm working in a company where we are using a lot of S2S VPNs,</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">I follow some SKs but didn' found a real solution to my problem, basically :</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">we are routing traffic between 2 sites <SPAN style="background: white;">with VPNs&nbsp;&nbsp;</SPAN>(we are the HUB:H)&nbsp;</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">&nbsp;</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">S1-H-S2&nbsp; (S: Spoke)</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">&nbsp;</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">S1 : domain based vpn</SPAN></P><P style="margin-bottom: 12.0pt;"><SPAN style="font-size: 12.0pt; color: black;">S2 : Route Based vpn</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">t<STRONG>raffic from&nbsp;<SPAN style="background: white;">S2==&gt;H==&gt;S1 encrypted fwd properly on S1 vpn <SPAN style="color: #008000;">(no problem)</SPAN></SPAN></STRONG></SPAN></P><P><SPAN style="color: black; font-size: 12.0pt;"><STRONG>traffic from S1==&gt;H==&gt;S2 decrypted on H but <SPAN style="color: #ff0000;">not encrypted</SPAN></STRONG></SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">&nbsp;</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">try to follow sk116097 by adding dst-ip/nated ip on S2 GW doesn't help.</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">&nbsp;</SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">Anyone have an idea/experience same issues.<BR /></SPAN></P><P><SPAN style="font-size: 12.0pt; color: black;">Thanks in advance for any help</SPAN></P></DIV></BODY></HTML> Thu, 06 Dec 2018 14:33:27 GMT https://community.checkpoint.com/t5/Endpoint/Inter-VPN-routing/m-p/13561#M308 e016012e-c965-4 2018-12-06T14:33:27Z