topic Re: Connection Failed for RA VPN in SASE and Remote Access

Connection Failed for RA VPN

Matlu — Thu, 19 Oct 2023 20:27:00 GMT

Hello,

I have a remote user connection that connects through the Endpoint Security VPN.

Once connected, we need the user to be able to access through a S2S VPN that we have against a third party, to an IP 10.105.17.128:10400, but the connection is not successful.

"fw ctl zdebug + drop | grep x,x,x,x,x", gives us the following result.

fw_log_drop_ex: Packet proto=1 10.249.205.74:0 -> 10.105.17.128:10400 dropped by chain_ipsec_methods_ok Reason: vpn_decrypt_methods_ok failed;

Does anyone have any idea why the connection is dropped?

Regards.

Re: Connection Failed for RA VPN

PhoneBoy — Thu, 19 Oct 2023 21:41:51 GMT

The only thing that seems to match here is: https://support.checkpoint.com/results/sk/sk90060
Otherwise, you should involve TAC.

Re: Connection Failed for RA VPN

the_rock — Thu, 19 Oct 2023 21:53:21 GMT

Did this ever work? New config?

Re: Connection Failed for RA VPN

Matlu — Thu, 19 Oct 2023 22:22:44 GMT

This is a new configuration.

The IP pool of my remote users is 172.19.51.0/25.

What we want, is that when they are connected to the office, they should be able to reach an IP of a client, with which we have configured a S2S VPN. This IP is 10.249.205.74.

In our VPN DOMAIN of our Check Point, is it "mandatory" and "necessary" to add the IP 10.249.205.74 that is reached by a S2S VPN?