SMB remote access vpn clients connect to site to site vpn remote networks

[Baasanjargal_Ts]

Hello,

Remote access clients want to connect with IPSsec vpn remote encryption domain hosts. Gateway is Checkpoint 1490 SMB appliance. 

Remote clients can connect to office lan hosts successfully,

 IPSec remote encryption domain hosts can connect with office lan hosts successfully,

Now we want to connect Remote client  hosts with IPSec remote encryption domain hosts.

[PhoneBoy]

Pretty sure this will require configuration on both ends.
Is this SMB locally managed or centrally managed?

[Baasanjargal_Ts]

locally managed, remote peer has already added Remote access clients network to its Remote encryption domain

[G_W_Albrecht · Accepted solution]

Then in VPN > Remote Access > Advanced,  "Local Encryption Domain is defined by" click on "automatically..." link and define a manual encryption domain for RA VPN - containing both the local networks and the remote encryption domain.

[Baasanjargal_Ts]

Thanks, it works perfect,

I wrote some writeup here,
https://bskanet.blogspot.com/2019/09/checkpoint-smb-remote-vpn-clients.html