S2S VPN Azure-On Prem SMB Cluster with Smart1 Cloud

[blackhill20]

Hi Guys, 

so my setup is as follow everything is managed via Smart1-Cloud Management.

So On-Prem we have a 1900 SMB Cluster and on Azure we have one Cloudguard Gateway with some Web Ressources.

Azure Frontend eth0 10.21.0.4 - ping is working from clish to internet no problem.

Backend eth1 10.21.1.0/24

Now i did try to configure a Remote Access Community with both the Cluster and the Azure GW.

Encryption i left on Default and for Tunnel Management VPN per subnet pair.

VPN Domain for Cluster is LAN and for Azure-GW it is 10.21.0.0/16

Disable NAT inside VPN Communities is also checked.

What ever combination of Encrytion or Domain i tried i cant establish the tunnel.

Does anybody has an idea? Im getting out of Ideas.

Thank you very much in Advance for your time.

[PhoneBoy]

What is the precise error message(s) received in the logs?

[blackhill20]

In the Liogs everything seems accepted But when i make a vpn tu tlist the peer TS looks like a different one(172…. subnet) . You Need the Logs from Ike.elg? 

[PhoneBoy]

Additional debug would certainly help.
https://support.checkpoint.com/results/sk/sk62482