- Products
- Learn
- Local User Groups
- Partners
- More
It sounds like you just have a mismatch of the hosts/networks being used in the Phase 2 proposal.
- Which tunnel sharing mode are you using under "Tunnel Management"?
- Both devices need to match / agree on the hosts/networks being exchanged and they need to use the same /CIDR
I find it helpful to use granular encryption domains for all VPN tunnels, so I know Check Point is using the right /CIDR of a subnet in a tunnel. If you are just exchanging a couple subnets, you would use something like this:
- Tunnel Sharing Mode: One VPN tunnel per subnet pair
- Create a new simple network group containing the subnets you want to exchange.
- Apply the group to the community.
