topic Re: 790 appliance remote access in Spark Firewall (SMB)

790 appliance remote access

Omerav — Tue, 04 Aug 2020 20:49:57 GMT

Hi,

I have manual managed 790 appliance.

Remote VPN configure on office mode with /24 subnet.

Users are getting a /32 subnet.

1.How can I assign /24 subnet?

2. How can I assign a reserved up for a user?

Re: 790 appliance remote access

PhoneBoy — Tue, 04 Aug 2020 23:53:13 GMT

What precise client was installed by the end user?
Meanwhile, for reserving an IP for a specific user, you can try: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk33422

Re: 790 appliance remote access

Omerav — Wed, 05 Aug 2020 06:58:49 GMT

Hi Client was installed with version E83.10

https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=105987

Re: 790 appliance remote access

G_W_Albrecht — Wed, 05 Aug 2020 06:59:43 GMT

As an addtion to the sk, on SMB you use

/pfrm2.0/opt/fw1/conf/ipassignment.conf

Re: 790 appliance remote access

Omerav — Wed, 05 Aug 2020 06:59:59 GMT

Hi Client was installed with ver.E83.10

https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=105987

what I'm trying to accomplish is to have access between nodes inside the VPN subnet.

Re: 790 appliance remote access

Omerav — Wed, 05 Aug 2020 09:57:41 GMT

Hi Done that but no change occurred user still gets 10.0.0.2 and I cant see it on connected user tab

attached

Re: 790 appliance remote access

Omerav — Wed, 05 Aug 2020 10:16:33 GMT

Hi i've configured the ipassignment.conf file but no luck

user keeps getting 10.0.0.2 address and not the address from the range I've configured and I also cant see it connected on the remote user connected tab on the gui.

something is weird with my VPN.

Re: 790 appliance remote access

PhoneBoy — Wed, 05 Aug 2020 13:14:29 GMT

If the client was installed as SecuRemote (it’s one of the choices upon installing), that sounds like the IP the client will get.
The client needs to be reinstalled as Check Point Mobile.

Re: 790 appliance remote access

Omerav — Thu, 06 Aug 2020 06:05:27 GMT

Thanks you @PhoneBoy another question, i want to reserve an IP for a user following the ipassignment.conf file but with no luck.

Re: 790 appliance remote access

G_W_Albrecht — Thu, 06 Aug 2020 08:24:48 GMT

I would contact TAC for the issue...

Re: 790 appliance remote access

Omerav — Thu, 06 Aug 2020 08:30:50 GMT

problem solved after disabling nat for the VPN subnet and installing endpoint security VPN instead of remote secure access.

Re: 790 appliance remote access

PhoneBoy — Thu, 06 Aug 2020 15:08:26 GMT

An internal note in the SK I linked suggested this may not work on locally-managed SMB appliances.
You can try a TAC case, but I suspect you may be out of luck.

Re: 790 appliance remote access

Omerav — Sun, 09 Aug 2020 10:14:43 GMT

another quick Q while were at it, I'm configuring S2S VPN to a PA device do I need to use vti ? and if yes how ?

Re: 790 appliance remote access

PhoneBoy — Sun, 09 Aug 2020 14:12:06 GMT

Offhand, don’t know, but recommend creating a new thread for this question.

Re: 790 appliance remote access

Omerav — Mon, 10 Aug 2020 06:02:03 GMT