R82 Site to Site VPN with third party Router

[TINTIN8]

Hi Checkpoint Gurus

I'm trying to set up a site-to-site VPN with a third-party GW (Router). In the new R82, it looks like there is a feature called "Enhanced link selection."

In my GW object, I've defined the External interface as Enhanced Link Selection. But realistically, we don't know how third-party devices are configured. All we do is exchange the security parameters with the given IP address and accept the interesting traffic.

The problem is that I cannot set up my VPN community in Enhanced mode without defining an Enhanced link selection on the third-party object. This doesn't make sense.

The error message says, "The VPN Community is configured to use "Enhanced Link Selection. "At least one VPN peer does not have configured interfaces. You must configure Enhanced Link Selection Interfaces in each VPN peer object."

Please refer to the attached pictures.

We cannot define interface details on third-party objects, and it's not practical to ask our vendors for this information.

Your help is much appreciated!!!

[the_rock]

I did this in my R82 lab, will send you some screenshots tomorrow. Error is telling you that peer link selection is incorrect, thats why.

Andy

[TINTIN8]

Thanks the_rock!!!

[the_rock]

Of course @TINTIN8 

[the_rock · Accepted solution]

Please see attached.

Andy

[TINTIN8]

Thank you soooo much!!! it worked!!!

[the_rock]

Glad we can help.

Andy

[PhoneBoy]

For interoperable objects, the interface name doesn't have to match what the remote end actually uses.
You can use something generic like eth0.
The important thing is that interfaces are defined with the correct IP addresses.

[the_rock · Accepted solution]

@TINTIN8 Hopefully screenshots I sent are good enough, but if not, let me know.

Andy