topic Re: Regarding VPN Tunnel Issue in Spark Firewall (SMB)

Regarding VPN Tunnel Issue

yasindu — Thu, 31 Oct 2024 16:27:57 GMT

This is a CheckPoint 1570 firewall. When we create a VPN tunnel on the Check Point firewall to allow remote user access, the remote static IP of the VPN tunnel is currently showing as the backup router's IP address. However, we need to change it to the primary router's IP address, as the public static IP is currently assigned only to the primary router. How can I change this while I am using local maange firewall.

Re: Regarding VPN Tunnel Issue

PhoneBoy — Fri, 01 Nov 2024 15:06:16 GMT

What does your Link Selection setting say?
This is configured in VPN > Site to Site > Advanced

If you can't resolve it from these settings, please provide more details about your configuration.
You speak of primary/backup router IP addresses.
Please provide a simple network diagram and include where NAT is done by what device.

Re: Regarding VPN Tunnel Issue

the_rock — Sun, 03 Nov 2024 18:00:38 GMT

I also think simple diagram would definitely help us here.

Andy

Re: Regarding VPN Tunnel Issue

yasindu — Mon, 04 Nov 2024 03:33:47 GMT

Here is the network diagram, which should be within the VPN. However, this is not happening, and the secondary link is appearing as a remote gateway. Additionally, there is no static public IP address on that secondary WAN link, so I cannot connect through it via VPN.

Re: Regarding VPN Tunnel Issue

PhoneBoy — Mon, 04 Nov 2024 16:53:07 GMT

You missed my question from earlier: What does your Link Selection setting say?
This is configured in VPN > Site to Site > Advanced.
Believe this also applies for Remote Access VPN as well and you can specify a specific IP.