Client to Site VPN r80.30

[K_montalvo]

Hello friends,

I would like to configure a client to site VPN on my r80.30 Security Gateway for a external contractor that would be working temporally. I would like to configure something simple, in the firewall rules i will only permit access to the internal server he would be working. If you guys have a configuration guide that can help, please share.

Thanks you all!

[G_W_Albrecht]

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_RemoteAccessVPN_AdminGuide/T...

[K_montalvo]

@G_W_Albrechtmany many thanks for posting that link i read it and was very informative!

[K_montalvo]

After the Remote Access VPN set up i tried to connect from Endpoint Security Client via the Security Gateway public facing IP and received the following error:"Site is not responding. You might be in hotspot environment" Can anyone guide me if there's is a setting for defining this on the Gateway or im missing something? Any help would be appreciated my friends!

[K_montalvo]

@PhoneBoyBuddy can you help with this issue please, hope your well!

[PhoneBoy]

Start here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[K_montalvo]

@PhoneBoythat did not worked for me, also tried connecting using publicip:443 its connects the first time but after disconnecting and reconnect i received the same error  i have a hotspot enviroment internally but this vpn or mobile access network its not associated with this. Just to discard i will try to disable my internal captive portal and retry. If you have any other tips i can try are very welcome.

[K_montalvo]

Also want to add that Im able to connect using console VPN from Android without issues, its only using the Endpoint Security Client will try from a personal laptop to connect using the E85.40_CheckPointVPN later since im not able to install since i have to uninstall fist the Endpoint Security. The goal is to have the contractor use the E85.40_CheckPointVPN since were not going to use the Endpoint Security on his Laptop. But for internal users will be using the Endpoint Security Client to use always auto connect to enforce the traffic go through the security gateway when roaming.

[PhoneBoy · Accepted solution]

What is the main IP of your gateway object?
Is it the external IP or something else?
If it is NOT the externally reachable IP, you'll need to set the relevant IP in the Link Selection setting.

[K_montalvo]

What is the main IP of your gateway object?-172.16.0.1
Is it the external IP or something else?External IP its reacheable in traceroute from other external network and able to connect using capsule VPN from Android. The issue is at the moment using the Endpoint Security Client,(Will try tonight connecting from the E85.40_CheckPointVPN.
If it is NOT the externally reachable IP, you'll need to set the relevant IP in the Link Selection setting._I Here included the actual configuration, will try defining that link selection soon in lunch break and will let you know.

*Also tried clientless via SSL and did not worked, attached the error:

[K_montalvo]

Disregard the Clientless VPN error i just fix it it was not enable on the properties, i still with the Endpoint Security Client issue. (the hotspot error)

[K_montalvo]

@PhoneBoyThe issue was  resolved setting the external public IP in the link selection and removing from "Apply these setting to VPN links option in the ISP redundancy page" now i will continue internal testing and prepare documentation for future references. As always many thanks for your help!