topic Re: IP SEC VPN SITE TO SITE BETWEEN CP 5100 TO SMB SPARK 1600 in Spark Firewall (SMB)

IP SEC VPN SITE TO SITE BETWEEN CP 5100 TO SMB SPARK 1600

K_montalvo — Mon, 04 Apr 2022 21:37:36 GMT

Hello my friends,

I need to set up a Site to Site IP SEC VPN between a Quantum 5100 regular Gaia on r80.30 with (2) Quantum Spark SMB 1600 running embedded Gaia r80.20.35. The SMB are locally managed and i know how to set up the site to site from there, how would you guys recommend to set up from the SMS site for the 5100 Gateway?

Thanks

Re: IP SEC VPN SITE TO SITE BETWEEN CP 5100 TO SMB SPARK 1600

G_W_Albrecht — Tue, 05 Apr 2022 08:06:42 GMT

As it should be: Create externally managed CP GWs in Dashboard and use it as spikes in the star topology. You can learn how to create them and use certificates for VPN here: Site to Site VPN R81.10 Administration Guide p.40ff https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_SitetoSiteVPN_AdminGuide/Topics-VPNSG/Basic-Site-to-Site-VPN-Configuration.htm?tocpath=Basic%20Site%20to%20Site%20VPN%20Configuration%7C_____2#Configuring_a_VPN_with_External_Security_Gateways_Using_Certificates

Re: IP SEC VPN SITE TO SITE BETWEEN CP 5100 TO SMB SPARK 1600

K_montalvo — Tue, 05 Apr 2022 14:48:23 GMT

@G_W_Albrecht Thank you, im following the steps provided on the link and im up to point #4 trying to add the externally managed gateway as a satellite but its not showing up instead if i tried to add it it advises me that an externally managed gateway its already defined with the same IP. I created a case with TAC and waiting an engineer to contact me, and i need to bring up this tunnel ASAP. I appreciate your help or to share any other tips or workaround to set this up.

Re: IP SEC VPN SITE TO SITE BETWEEN CP 5100 TO SMB SPARK 1600

G_W_Albrecht — Tue, 05 Apr 2022 14:54:53 GMT

Hard to say what fails - did you edit the externally managed checkpoint SMB GW object and does it show the correct SMB model and has VPN blade enabled ?

Re: IP SEC VPN SITE TO SITE BETWEEN CP 5100 TO SMB SPARK 1600

K_montalvo — Tue, 05 Apr 2022 18:06:32 GMT

On the correct SMB model its not resolving automatically and does not give me the option to define manually. Probably there is something im missing i will keep trying. Thank you buddy!