Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
lgodlewski
Explorer

S2S VPN behind NAT and DAIP

Hi all,

I need to configure a temporary S2S VPN between Checkpoint appliances.

The new device will be behind a broadband connection with a dynamically assigned public IP address, which will be NATed to a private address.

diagram.jpg

I am able to establish SIC connectivity between SMS and the remote gateway; however, when I try to generate traffic from the host, I am getting a message that says, 'VPN failed to resolve Gateway IP address.' Has anyone else had the same problem?

2025-04-22_17h09_50.jpg

 

gw settings2.jpg

 

 

 

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

Version/JHF of all relevant components here.
Have you successfully pushed policy to this remote DAIP gateway?
What side of the VPN is initiating the connection?
Typically, this should be done from the DAIP gateway side.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events