Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

[Nucleo]

Dear All,

I am having issue with my Checkpoint SMB 1570 when creating site to site with Sonicwall.

My Sonicwall has DYNAMIC WAN. When i key in the IP address, the site to site will be active and no issue but when i change to hostname with Dynamic DNS the tunnel will change to not yet initialised and give me a weird IP address on the VPN tunnel page.

Let me know what i did wrong.

Thank you.

[PhoneBoy · Accepted solution]

Did you configure things similar to: https://support.checkpoint.com/results/sk/sk112213?
I realize the remote end is Sonicwall, but the settings on your end should be similar.
Otherwise, please provide screenshots of precisely what you've configured (sensitive details redacted).

[the_rock]

Isnt this same thing you posted yesterday?

https://community.checkpoint.com/t5/General-Topics/Checkpoint-1570-Site-to-Site-VPN-with-Sonicwall-N...

By the way, you need to follow the guide to configure this with the cert, as per link Chris and I gave you. Also, link @PhoneBoy provided is literally same screenshots, was probably written of the community link. Either way, thats what you HAVE TO follow to make this work, otherwise, it will never work with PSK. 

Andy

[PhoneBoy]

Yes it was and I merged the threads. 🙂

[the_rock]

Hm...does not sound like thats something you can control on CP side. I had seen sonicwall GUI once in my life and it confused the bejesus out of me : - ). But, based on last thing you said, it makes sense why this happens, as CP would never recognize the new IP address once it changes.

[Nucleo]

The issue is happening on CP 1570 side.

The sonicwall has no issue accepting hostname.

[the_rock]

Maybe simple diagram would help. Sorry, but Im not understanding how issue can be on CP side. On Check Point, if it happens to use dynamic IP, then you set up S2S with certificate, otherwise it would never work. If its static IP, then you configure it as you normally would. 

[Chris_Atkinson]

What authentication method are you using for the VPN/tunnel?

[Nucleo]

Im using Preshared key.

[the_rock]

Thats never gonna work with dynamic IP.

[Nucleo]

I see okay can share me any link that can help me setup the S2S with certificate with Sonicwall?

[the_rock]

In my humble opinion,  WAY BETTER than any official guide you will find.

Hope it helps.

Andy

https://community.checkpoint.com/t5/Security-Gateways/HowTo-Set-Up-Certificate-Based-VPNs-with-Check...

[Chris_Atkinson]

Per sk167473:

[G_W_Albrecht]

sk167473 is not available anymore - or has it been replaced by another SK ?

kind regards,

-- 

Guenther Albrecht

CCSE CCTE CCME CCSM Elite SMB Specialist

Arrow ECS GmbH  A-1100 Wien, Wienerbergstrasse 11

Tel: +43 1 370 94 40 325                     Fax: +43 1 370 94 40-333

[the_rock]

Comes up fine for me.

Andy

https://support.checkpoint.com/results/sk/sk117536

[G_W_Albrecht]

I see - i can not find it using search, but https://support.checkpoint.com/results/sk/sk167473 works - strange, i gave feedback to it...

[the_rock]

Not sure what to tell you mate...for me, works no matter what sk I search.

Andy

[G_W_Albrecht]

NOw it does that also for me again - strange issue...

[the_rock]

Just tested, fine for me.

Andy

[PhoneBoy]

Seems like we had some issues with searches in general with SupportCenter over the last couple days.
I believe these have been resolved now.