The site to site VPN between CheckPoint just won't bring up automatically after reboot

[MTS]

Hi,

We just set up a VPN community for both CheckPoints for two remote sites.

Both CheckPoints are managed by the same SMS.

We find that even we configure the permanent tunnel for the community and install the policy package for it to both CPs.

The site to site VPN between CheckPoint just won't bring up automatically after reboot 

Now, we have to get the Smartview and manually reset the Tunnel to bring it up...

How to fix this?

By the way, we have another three VPN tunnels' communities connecting to Fortigate and PaloAlto, and no the same issue was found...

[PhoneBoy]

What version/JHF?
What messages appear in the firewall logs?
Anything odd in $FWDIR/log/vpnd.elg?

[MTS]

What version/JHF?
the latest.

What messages appear in the firewall logs?

Seems no error?

I will just reset / reinstall the policy package then the VPN will up again,

Anything odd in $FWDIR/log/vpnd.elg?

Nope.

[the_rock]

Ok, so if its brand new community, we know for sure it never worked before...phoneboy made a good point, usually vpnd* files in $FWDIR/log would give some indication about possible failures...have you tried running vpn debug ikeon and vpn debug ikeoff when this occurs and then examine ike.elg file?

[PhoneBoy]

The latest version is R81.10 which doesn’t have a JHF yet.
Is this what you are running?
If not, please state the precise version/JHF you are running.

Might want to look at the general VPN debug steps here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
In General, the more information you provide, the more likely we can help you.

[MTS]

How to check the version/JHF?

[the_rock]

cpinfo -y all from expert mode

[MTS]

This command can not be used for SMB model.

No "-y"

[PhoneBoy]

For SMB, you can see the exact version and build in the WebUI, which should have been provided at the beginning of this thread.
In general the more information you can provide us about your environment, the easier it is for us to help you.

The general VPN debugging SK I linked to earlier should still be helpful on SMB.
See also: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[MTS]

Version:

1570 GW: R80.20.25

[G_W_Albrecht]

Which Build, 992002136 ?

[MTS]

[G_W_Albrecht]

I would suggest to involve TAC !