topic Re: Dynamic IP address and VPN site to site in General Topics

Dynamic IP address and VPN site to site

marcinw — Wed, 11 Nov 2020 11:32:28 GMT

Hi,

I am trying to force 1490 to create VPN tunnel with MGMT server with Dynamic IP , I have no problem with establishing VPN connection on SMB with static IP address. I am doing everything according to document

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Check-Point-SmartCloud-Admin-Guide/Topics-Smart-1-Cloud/Advanced-Configuration.htm?TocPath=Smart-1%20Cloud%20Advanced%20Configuration%7C_____7

section : How to Connect a SMB Security Gateway with a Dynamic IP

when I am trying to establish connection from MGMT I see "Trust established" (however I dont see this on SMB security dashboard), when I am trying push policy to GW-4 (this gateway ) I see "...a dynamic object should be used instead" please check attachment.

What Am I doing wrong ? thank you

Re: Dynamic IP address and VPN site to site

_Val_ — Wed, 11 Nov 2020 11:41:50 GMT

The document you are quoting is about SmartCloud management. Are you using on prem, or SmartCloud?

Concerning the error, show rule 5 specifically, and your DIAP GW object.

Re: Dynamic IP address and VPN site to site

marcinw — Wed, 11 Nov 2020 11:51:14 GMT

I don't use smartcloud it's a simple LAB edge firewall/ mgmt server in VMware, and a few of 1550, 1430 .

The rule no5 refers to access of MGMT srv to VPN GW , GW-4 is a member of VPN_Gateways group

Re: Dynamic IP address and VPN site to site

_Val_ — Wed, 11 Nov 2020 12:07:30 GMT

Use a proper guide then.

Make use your GW4 is defined as "DIAP GW" and not a regular one.

Re: Dynamic IP address and VPN site to site

marcinw — Fri, 13 Nov 2020 09:34:13 GMT

DO I have to use certificates (create any) to create this VPN tunnel betwen static IP edge and dynamic IP smb gateway? or it happens in the same way like with static IP ?