R80.40 S2S VPN

[LostBoY]

I am looking to set up a S2S VPN with a customer. While exploring for options i came across 2 types of modes i.e. Star and Mesh. Which one should be selected if VPN is to be stablished with 1 customer only.. or any of them works fine in this case.

Also, once the tunnels are stablished how can i verify if the configuration is fine and tunnels are stablished. I had done this in ASA and there was a section where tunnels are visible in ASDM but couldn't find something similar for Checkpoint.

[Marcel_Gramalla · Accepted solution]

For all regular VPNs you would likely use the Star Communities. Mesh is only necessary if you want to connect multiple Sites with you and also between them. It's a mesh like the name says 🙂

For monitoring you can ever use the old SmartView Monitor "Tunnel & User Monitoring" under Logs --> new Tab and at the bottom under "external apps".

On the Gateways you can see it even better with this command (Expert): vpn tu tlist -p PEER_IP

You can see all SA with the established subnets etc.

[Abi]

You can also use "vpn tu" from the command line of one of the Gateways. Select option 3 and put in the specific IP of the peer to verify the status of the tunnel.

[the_rock]

Excellent response!!

Andy