topic Dynamic VPN Configuration in General Topics

Dynamic VPN Configuration

Sanjay_S — Mon, 27 Sep 2021 14:13:13 GMT

Hi All,

Is it possible to configure the Dynamic VPN IPsec tunnels in Checkpoint as same as Cisco ASA?

Means, no static Peer IP and without peer ip we just configure the dynamic crypto map in cisco ASA with the PSK and all parameter so that the peer establishes the VPN. Is it something similar can be done in Checkpoint?

Regards,

Sanjay S

Re: Dynamic VPN Configuration

PhoneBoy — Mon, 27 Sep 2021 15:18:11 GMT

You can create a VPN with a peer that has a dynamic IP, yes.
The relevant object in the Check Point configuration must have the Dynamic IP option ticked in the General Tab.
Also, certificate-based authentication must be used as we do not allow PSKs when the remote IP is not fixed as they are significantly less secure.

Re: Dynamic VPN Configuration

_Val_ — Mon, 27 Sep 2021 15:34:01 GMT

Yes

Re: Dynamic VPN Configuration

Sanjay_S — Tue, 28 Sep 2021 08:33:04 GMT

Thanks PhoneBoy, I will work on this and get back to the same thread if any further doubts on this.