topic Re: Unstable VPN with AWS in General Topics

Unstable VPN with AWS

Sander_Zumbrink — Fri, 01 Feb 2019 08:15:34 GMT

Hello,

We are busy with setting up VPN's between AWS and Check Point onpremise ClusterXL setup.

We are using BGP for dynamic routing between both environments.

We followed the instructions from AWS and Check Point SK exactly.

The setup works, traffic is going from AWS to the customer and back.

But...

The VPN tunnel is really unstable. We see a lot of disconnects with BGP.

Almost all the issues are related to the key install with phase 1 and next the phase 2.

It looks like AWS is sending me deletes for the keys.

The Check Point is starting new main mode for phase 1.

And packets arive from AWS with invalid SA.

I already have a ticket with Check Point support, but no solution yet.

So I'm asking here if there are other experts had these issues.

And how to solve it...

G_W_Albrecht — Fri, 01 Feb 2019 10:03:27 GMT

Sander_Zumbrink — Fri, 01 Feb 2019 10:30:05 GMT

Hello Gunther,

Thanks for your response.
But the gateway on AWS is a AWS gateway and not a Check Point Virtual Appliance.

So the Hotfix can't be installed and I think the issue is not the same.

Sander

ikokonkwo99 — Tue, 23 Feb 2021 17:56:07 GMT

Hi Sander_Zumbrink, I would like to know how this was resolved eventually. Having a similar issue at the momebt