the new subnets are unable to communicate through the existing VPN tunnel

[Namnh]

We have an existing Site-to-Site VPN tunnel between our Check Point firewall and a remote peer. Previously configured subnets are working correctly through the tunnel. However, after adding a new local subnet (e.g., 10.100.241.0/24) and a corresponding new peer subnet (e.g., 10.0.229.0/24), the new subnets are unable to communicate through the existing VPN tunnel.

[_Val_]

Did you reinstall policy after those modifications?

[Martijn]

Hi,

When adding new networks to a VPN setup, you need to add them on many locations in the policy.

- Encryption Domain
- Rule base
- Maybe Anti-spoofing

Is this all done? Has the remote peer also the updated configuration?

What doe you see in the logs?

Regards,
Martijn

[the_rock]

Make sure to add those subnets to vpn domain and install policy, test.

Andy