topic Use public IP from another site via ipsec tunnel? in Spark Firewall (SMB)

Use public IP from another site via ipsec tunnel?

tunish — Thu, 12 Dec 2024 08:14:20 GMT

Hi,

We have setup that site1=HuaweiRTR and site2=SPARK, both sites have public ip and ipsec tunnel works ok.

We have publicIP block in site1 for example 1.1.1.0/29 which we want to use for servers IP's behind site1-LAN like in picture.

This was working at some point, but now it is not. Is there any cases that are like this and could get any help for it?

If we change SPARK to huawei ar router in picture, scenario works ok, huawei just routes 0-route towards tunnel in site1.

Br,T

Re: Use public IP from another site via ipsec tunnel?

_Val_ — Thu, 12 Dec 2024 08:23:50 GMT

The network on Site 1 should be NAT'ed

Re: Use public IP from another site via ipsec tunnel?

tunish — Thu, 12 Dec 2024 08:28:17 GMT

What do you mean by that? It works like it is now with another huaweiRTR, but is there any specs how/what should be changed to spark?

Re: Use public IP from another site via ipsec tunnel?

PhoneBoy — Thu, 12 Dec 2024 14:11:21 GMT

When you say “not work” what are the precise symptoms?
What messages do you see in the logs when traffic is generated?
The debug procedure for VPNs: https://support.checkpoint.com/results/sk/sk62482