Create a Post
Showing results for 
Search instead for 
Did you mean: 

Need a Static IP address assigned to Remote Access User

We have third party vendors who needs to access a legacy device(IP address which will accept connections to it only on a particular IP(eg. Before migrating to Checkpoint Appliance, we were able to assign each remote access vendor a Remote Address on the "SSTP VPN profile" that we created on the appliance.


Third Party Vendor --->(connecting with SSTP client settings on Windows Laptop)-->Gets assigned Remote IP address from SSTP config on Router---> gets VPN established on the Router---> Third Party vendor is now able to access the Legacy device. The Legacy Device (IP address is on a VLAN (172.16.10.x/24) that has other devices in that VLAN.

On Checkpoint, we have assigned another subnet (10.100.200.x) that is not used in our internal LAN to be used for leasing addresses to Remote Access Users(Third Party Vendors).

Would we able to 

  1. assign static IP address to Remote Users connecting to Remote Access VPN configured on Checkpoint 1570 appliance(eg.
  2. Get this static IP address to be NATed to the existing Internal LAN subnet address, so that the legacy device can accept this connection. (eg. <Natted to>, so that the legacy device with IP will think that the Remote access VPN is and provide access)

Hope this makes sense.


0 Kudos
2 Replies

Better open SR# with TAC to get this resolved ! What is the error you do experience ?

0 Kudos

You can define Hide NAT for office mode network object or use IP assigment and define NAT 1-to-1 for each IP that you define there. 

0 Kudos