IP SEC VPN SITE TO SITE BETWEEN CP 5100 TO SMB SPARK 1600

[K_montalvo]

Hello my friends,

I need to set up a Site to Site IP SEC VPN between a Quantum 5100 regular Gaia on r80.30 with (2) Quantum Spark SMB 1600 running embedded Gaia r80.20.35. The SMB are locally managed and i know how to set up the site to site from there, how would you guys recommend to set up from the SMS site for the 5100 Gateway?

Thanks

[G_W_Albrecht]

As it should be: Create externally managed CP GWs in Dashboard and use it as spikes in the star topology. You can learn how to create them and use certificates for VPN here: Site to Site VPN R81.10 Administration Guide p.40ff https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_SitetoSiteVPN_AdminGuide/Top...

[K_montalvo]

@G_W_Albrecht Thank you, im following the steps provided on the link and im up to point #4 trying to add the externally managed gateway as a satellite but its not showing up instead if i tried to add it it advises me that an externally managed gateway its already defined with the same IP. I created a case with TAC and waiting an engineer to contact me, and i need to bring up this tunnel ASAP.  I appreciate your help or to share any other tips or workaround to set this up.

[G_W_Albrecht · Accepted solution]

Hard to say what fails - did you edit the externally managed checkpoint SMB GW object and does it show the correct SMB model and has VPN blade enabled ?

[K_montalvo]

On the correct SMB model its not resolving automatically and does not give me the option to define manually. Probably there is something im missing i will keep trying. Thank you buddy!