Help Needed: Site-to-Site VPN Setup (Checkpoint 3600 & Fritzbox Home Router)

[LM-Rafael]

Hi,

I want to connect a headquarters with a branch office using a site-to-site VPN.

Environment Details

Headquarters:

• Device: Check Point 3600 running Gaia R81 (latest updates)
• WAN: Two ISPs (WAN1 & WAN2) with static IPs, connected via VDSL dial-up modem
• LAN: 192.168.88.0/24

Branch Office:

• Device: Fritzbox (latest firmware) acting as the VPN server
• WAN: Static IP
• LAN: 192.168.89.0/24

Configuration Steps Taken

For the Check Point firewall, I followed:

• (2110) Day-14 | IPSec VPN Configuration between Checkpoint and Fortigate Firewall - YouTube

For the Fritzbox setup, I used:

• IPsec Site-to-Site VPN zwischen Sophos XG und Fritzbox konfigurieren - Orange-Fox
• Fritzbox supported Vendor information about IPSEC VPN: FRITZ!Box mit einem Firmen-VPN (IPSec) verbinden | FRITZ!Box 7590

Issue Description

The VPN tunnel sometimes establishes successfully but only after 15–25 minutes. However, traffic is not being routed through the VPN tunnel.

I am unsure why the connection is unstable and why traffic is not passing through.

Request for Help

• How can I ensure traffic is correctly routed through the VPN tunnel?
• Are there specific settings I need to check on the Check Point firewall or the Fritzbox?

Thanks in advance for your support!

Best regards,
Rafael

[the_rock]

Today was a good day, I also solved DHCP office mode issue that I had been trying to fix in the lab for almost 2 weeks and did not have sadly any luck even after 2 TAC sessions. But hey, I learned long time ago that persistence ALWAYS psys off 🙂

Glad both issues are fixed!

Have a great night.

Andy