Access rule for site-to-site vpn traffic, do not matched when i provide vpn community

[OlegPowerC]

Hi mates

I begginer in checkpoint, i try to configure vpn site to site based on tunnel interfaces (one site is checkpoint, remote site is Cisco ASA).

Tunnel is up, and traffic aalowed but only if i do not provide vpn community in the rule.

if i provide vpn community - traffic mattced by cleanup rule.

I checked log message and this messages contain vpn community when "vpn community" fileld on the rule is "any" and messages do not contain vpn community if "vpn community" field contain properly community name.

What i do wrong?

Thank you!

[the_rock]

Hey mate,

No problem, we are here to help. Okay, for starters, can you send screenshots of how vpn community is configured? Im referring to all the below tabs in the object itself, just blur out any sensitive data.

Andy

 

[OlegPowerC]

Hello and thank you!

I already resolved this issue.
I provided "domain" - network object on my interoperable devices.
But now I migrate to Tunnel + BGP topology in checkpoint side and VTI + BGP on Cisco side and no issues yet, it is my first time with checkpoint, excluding lab