VPN Routing is not working or how do I make this work?

[Blason_R]

Hi Team,

I have two tunnels VPN-A and VPN-B; both are terminated on my onprem firewall. Users from VPN-A would like to access resources from VPN-B through CheckPoint firewall.

e.g. 

VPN-A

Remote-Network 10.10.10.0/24

Local Network - 172.16.5.0/24

VPN-B

Remote-Network 192.168.10.0/24

Local Network 172.16.5.0/24

Servers from 10.10.10.0/24 would like to access 172.16.5.0/24. I tried adding subnet in encryption domain but this is not happening.

Any other clue?

[Alex-]

Check you have activated, in the VPN Routing tab, routing between satellites in your communities.

[Blason_R]

Hello,

There are two different communities how do I activate it?

[K_R_V]

you can always modify the vpn_route.conf file on the management station to force traffic into the tunnel.

from sk26993 :

The configuration file, "vpn_route.conf", is a text file that contains the name of network objects. The format is: Destination, Next hop router, Install on Security Gateway, Force Override (optional field). Fields must be separated by tabs.

Note: Be very careful. All entries in the relevant "vpn_route.conf" must be objects that exist in the database. The names must match object names exactly.

[Blason_R]

Need to check that - Since I have never have defined that.

Like which names should be kept same exactly?

Community?

Interoperable_device?

Subnet?

[the_rock]

Maybe below is helpful?

Andy

https://community.checkpoint.com/t5/Security-Gateways/Routing-between-VPNs/m-p/90408

[the_rock]

How is below cxonfigured?

Andy

 

[Blason_R]

Well in my case @the_rock there are two mesh communities configured and its not star community  defined

[the_rock]

Gotcha. In that case, what @K_R_V said would make most sense, to me anyway.

Andy