topic Re: RADIUS Authentication over Site-to-Site VPN 1450 self managed in Spark Firewall (SMB)

RADIUS Authentication over Site-to-Site VPN 1450 self managed

Leonid_German — Wed, 02 Mar 2022 12:46:43 GMT

I have 1450 self-managed device.
I have set up a Radius Server to authenticate remote-access VPN clients. The Radius server is located at a remote site connected via Site-to-Site VPN on the same gateway the clients connect to.

Authentication fails because the request to the Radius server does not go through the VPN tunnel. Logs show traffic is accepted by an implied rule and consequently not encrypted.

Re: RADIUS Authentication over Site-to-Site VPN 1450 self managed

G_W_Albrecht — Wed, 02 Mar 2022 12:54:01 GMT

Is the RADIUS IP included in VPN encryption domain ?

Re: RADIUS Authentication over Site-to-Site VPN 1450 self managed

Leonid_German — Wed, 02 Mar 2022 13:11:06 GMT

Yes , it is.
Ping from the internal interface is working (ping -I).

Re: RADIUS Authentication over Site-to-Site VPN 1450 self managed

tomando11 — Mon, 12 Sep 2022 01:31:03 GMT

I've just gone through the same thing and managed to resolve it.
Device>Advanced Settings

Tick the box in the image for 'Use internal IP address for encrypted connections from local gateway'.

Re: RADIUS Authentication over Site-to-Site VPN 1450 self managed

G_W_Albrecht — Thu, 22 Aug 2024 09:03:32 GMT

Just for reference: https://support.checkpoint.com/results/sk/sk119415 contains this solution and the one for Centrally Managed SMBs !