Remote Access VPN stuck on reconnect

[jdoe1979]

Running R81.20 (i know, but it's a lab)
When connecting from WAN - RA VPN client connects the first time after adding the site fine. But if I disconnect and try again - stuck like this and fails with Site is not responding

Workaround is to delete the site and add again. Works till first reconnect. 

Connecting and reconnecting from LAN side works just fine.

I've done the whole refresh the cert routine too.

[PhoneBoy]

How precisely are you defining the site when you connect the first time?
Note that if you use an FQDN, the IP resolved is cached and stored as part of the site definition.

[jdoe1979]

just by IP address. no FQDN.

[PhoneBoy]

Did you try anything in: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

[jdoe1979]

no, after reading the article - I still don't understand what values need to be configured to get this working...
Jeez is that really the only way to fix this in CP world? 

[_Val_]

Before anything else, does any of this apply to your case? Quoting from the SK @PhoneBoy mentioned:

...IP address is different from the IP address that was originally defined when creating the new VPN site, especially in scenarios where the Security Gateway is behind a NAT device, or when the Security Gateway object is defined with an internal IP address, or a Management IP address that is not reachable from the Internet.

[jdoe1979]

It got fixed by nuking the old VM and starting over.

[Rakha747]

I Still get this error. even when i set my VPN IP Address into x.x.x.x, when i try to connect in second time, the IP Address back to the old ones

[PhoneBoy · Accepted solution]

The solution to this is here: https://support.checkpoint.com/results/sk/sk92716 

[Rakha747]

i follow this solution but still didn't solve the problem

[PhoneBoy]

Please start a new thread with the necessary details about your configuration.

[mohammed1987]

Hi rakha, 

Did you find the solution or workaround?

My customer has 7 Wan behind 7 broadband routers, the project is about migration from sophos with openvpn client to checkpoint, and he doesn't give the go till this issue not fixed

[Rakharafi747]

Yeah. Need to check the databases application on the smart console's app and delete the old VPN IP Address. If you're not change the VPN IP Address then it should be no problem