VPN Site to Site

[handiansudianto]

Hello,

I build VPN site to Site to our vendor, and for local subnet/host they use public ip let say 15.15.15.15, actually they talk the ip 15.15.15.15 is in they internal network.

Now the site to site already configure from my end on checkpoint, and from my internal server when i try ping to 15.15.15.15 the CP route this traffic to the internet and not to the tunnel.

So i want to know can we monitor if we have multiple site to site tunnel, which one is up and which one is down?

Also, there are possibility the traffic routed to the internet because from other side (vendor) have wrong configuration or not permit our internal server to access to 15.15.15.15 or by default the checkpoint will route all destination which use public ip to internet?

[AmirArama]

Hi,

please mention which platform and OS version you are running, and is it centrally or locally managed.

did you configure 15.15.15.15 in the vpn domain of the vpn peer object (network>vpn domain) ?

do you see 15.15.15.15 running the command: fw tab -t vpn_routing -u -f  ?

to display VPN tunnels, you can run 'vpn tu' (then use 1/2) or vpn tu tlist command

[the_rock]

Thanks for that command fw tab -t vpn_routing -u -f @AmirArama , never knew of it, super useful.

Best,

Andy

[the_rock]

To me, just logically thinking about it after I read your post, sounds like a routing issue. Can you verify what route its taking when you try reach the IP on the other side?

Best,

Andy