topic Re: S2S VPN connectivity issues in Spark Firewall (SMB)

S2S VPN connectivity issues

HristoGrigorov — Fri, 06 Dec 2019 04:28:53 GMT

Hi,

I have S2S VPN to another 5000 series appliance running R80.10. It happens every now and then that the tunnel is up and one host can SSH to a host on the other end but another one can't. The strange thing is that the host that can't SSH is able to ping the IP on the other end. Problem happens with any protocol (RDP, HTTP, etc). Only ICMP seems to always work.

Resetting VPN tunnel solves the problem but it started to annoy me already so I am looking for more permanent solution. We tried to switch tunnel sharing from per-net to per-host with no success.

Have you ever encountered such issue ? Is it possible to be TP policy on the other end that is causing this issue ?

Re: S2S VPN connectivity issues

G_W_Albrecht — Fri, 06 Dec 2019 12:00:47 GMT

Please PhoneBoy put this into its correct place 😉

Re: S2S VPN connectivity issues

G_W_Albrecht — Fri, 06 Dec 2019 12:02:02 GMT

I have encountered a lot of R80.10 issues and would suggest an R80.30 upgrade.

Re: S2S VPN connectivity issues

HristoGrigorov — Fri, 06 Dec 2019 13:07:01 GMT

I will inform admin of the other CheckPoint about your recommendation 🙂