StarLink IPSEC

[Aleksander_Osma]

Hi all!

Is it possible to create a VPN tunnel between sites using 2xCheckPoint verion R81.20 . ?

If so, and it worked, what steps should I take to set it up?

Thanks

[Chris_Atkinson]

Likely depends on your Starlink service/subscription, otherwise it shouldn't be vastly different to any other CP VPN.

[Ben_Dunkley]

Bear in mind that StarLink connections are usually on dynamic public IP addresses, and I have seen these change quite frequently (like multiple times per day), so that is likely to be an obstacle that needs dealing with.

[Aleksander_Osma]

Yes public ip change 5-6 times per day

I know fortigate Device work with cgnat StarLink , but i try use recomendation fortigate to use on CP

but only get

Quick Mode Sent Notification: no subnet support in ike negotiations

[PhoneBoy]

https://support.checkpoint.com/results/sk/sk181787 indicates a configuration issue (specifically the encryption domain).
Please detail the exact configuration steps you've taken as well as provide a simple network diagram.

[Lesley]

This error sounds like you have to change the settings in the VPN community from subnet to gateway (third option is host)

[PhoneBoy]

Which is configured in the relevant VPN community:

[Aleksander_Osma]

I try change settings but not help me. Now i collect debug information

[PhoneBoy]

Not sure why Starlink is in the subject.
In any case, start with the official documentation: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuid...