CP 5100 Series R80.30 SecureRemote drops after 17secs

[Sparks]

Hi Checkpoint,

My VPN Client SecureRemote drops after reaching 17secs of being connected. I'm Using vE80.90, vE82.40, vE82.50 client.

But when i use Endpoint VPN, no issue encountered.

May i know how to resolve this?

Thanks.

Spark

[Shay_Levin]

Hi,
Please post this again to the Remote Access Area
https://community.checkpoint.com/t5/Remote-Access-Solutions/bd-p/remote-access

[PhoneBoy]

Or you can just move it there like I did. 🙂

[PhoneBoy]

Not sure how much this applies to SecuRemote, but: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Shehan_Wickrama]

Hi,

You can do the following to resolve the issue sk78180

On all involved VPN Gateways that share the same encryption domain, modify the
$FWDIR/conf/trac_client_1.ttm file:
1. Connect to CLI on the VPN Gateway.
2. Backup the current file:
[Expert@HostName]# cp $FWDIR/conf/trac_client_1.ttm $FWDIR/conf/trac_client_1.ttm_ORIGINAL
3. Modify the current file:
[Expert@HostName]# vi $FWDIR/conf/trac_client_1.ttm
from
:automatic_mep_topology (

    :gateway (
        :map (
             :false (false)
                 :true (true)
                    :client_decide
                        (client_decide)
)
:default (true)
)
)
to
:automatic_mep_topology (
      :gateway (
            :map (
              :false (false)
                    :true (true)
:client_decide (false)
)
:default (false)
)
)

[Sparks]

I've done all the steps but still not able to connect via secuRemote.

here's the scenario.

when i used the Endpoint Security client.. i got the IP range of 17x.x.x.x/24 as default IP Office mode address and I'm able to connect to site.

client version e80.90

Endpoint Security Vpn

but when i use the secuRemote i got the IP range of 192.168.5.x/24 my connection drops after 17secs.

client version used for secuRemote.  e80.90, e80.92 , e82.40 e82.50, e82.10 e

Thank you.

[PhoneBoy]

Remember that SecuRemote doesn't provide an Office Mode address by design.
Have you configured IP Pool NAT?
I know this works as I did it recently.
See: https://community.checkpoint.com/t5/Remote-Access-Solutions/Quick-Primer-on-How-to-Configure-your-Ga...