This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
ABOUT CHECKMATES & FAQ
Create a Post
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Help

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Dilian_Chernev
Collaborator
‎2022-01-18 12:58 AM

Changing main IP address of a cluster - what could go wrong?

Hello mates,

I have to change the main IP address of a cluster from private address to a public to solve some issues with IKEv2 VPNs using the main address as ID.

Only Main address will be changed, no addresses on any interfaces. Currently used private address is VIP of internal interface, and want to change it to existing VIP of external interface.

What could go wrong with this change? Established S2S VPNs, Remote access VPNs ? Something else?

Thanks!

0 Kudos
1 Reply
Tobias_Moritz
Advisor
‎2022-01-24 06:15 AM

If this gateway is using Identity Awareness blade and Identity Sharing feature is active, the main ip address is used for the sharing connection (pdpd <-> pepd). If you hit this problem, you can circumvent this by setting the ip address used for these IA sharing connection manually by filling gateways field ia_control_connections_ip with (gui)dbedit. See sk60701 for that.

You should also check the various portal settings (admin, mobile access, user check, identity awareness, etc.) and their certificates.

0 Kudos