topic Re: VPN Routing is not working or how do I make this work? in General Topics

VPN Routing is not working or how do I make this work?

Blason_R — Tue, 10 Oct 2023 12:04:37 GMT

Hi Team,

I have two tunnels VPN-A and VPN-B; both are terminated on my onprem firewall. Users from VPN-A would like to access resources from VPN-B through CheckPoint firewall.

e.g.

VPN-A

Remote-Network 10.10.10.0/24

Local Network - 172.16.5.0/24

VPN-B

Remote-Network 192.168.10.0/24

Local Network 172.16.5.0/24

Servers from 10.10.10.0/24 would like to access 172.16.5.0/24. I tried adding subnet in encryption domain but this is not happening.

Any other clue?

Re: VPN Routing is not working or how do I make this work?

Alex- — Tue, 10 Oct 2023 12:14:29 GMT

Check you have activated, in the VPN Routing tab, routing between satellites in your communities.

Re: VPN Routing is not working or how do I make this work?

Blason_R — Tue, 10 Oct 2023 12:23:03 GMT

Hello,

There are two different communities how do I activate it?

Re: VPN Routing is not working or how do I make this work?

K_R_V — Tue, 10 Oct 2023 12:30:13 GMT

you can always modify the vpn_route.conf file on the management station to force traffic into the tunnel.

from sk26993 :

The configuration file, "vpn_route.conf", is a text file that contains the name of network objects. The format is: Destination, Next hop router, Install on Security Gateway, Force Override (optional field). Fields must be separated by tabs.

Note: Be very careful. All entries in the relevant "vpn_route.conf" must be objects that exist in the database. The names must match object names exactly.

Re: VPN Routing is not working or how do I make this work?

the_rock — Tue, 10 Oct 2023 13:42:09 GMT

How is below cxonfigured?

Andy

Re: VPN Routing is not working or how do I make this work?

Blason_R — Tue, 10 Oct 2023 13:55:46 GMT

Well in my case @the_rock there are two mesh communities configured and its not star community defined

Re: VPN Routing is not working or how do I make this work?

the_rock — Tue, 10 Oct 2023 13:57:07 GMT

Gotcha. In that case, what @K_R_V said would make most sense, to me anyway.

Andy

Re: VPN Routing is not working or how do I make this work?

Blason_R — Tue, 10 Oct 2023 13:58:46 GMT

Need to check that - Since I have never have defined that.

Like which names should be kept same exactly?

Community?

Interoperable_device?

Subnet?

Re: VPN Routing is not working or how do I make this work?

the_rock — Tue, 10 Oct 2023 14:13:29 GMT

Maybe below is helpful?

Andy

https://community.checkpoint.com/t5/Security-Gateways/Routing-between-VPNs/m-p/90408