[gfont96]

Hi All,

I have a Smartcentre Server (NGXR60 HFA04, Win2k3)with an internal IP address. I have a module (SPLAT and NGXR60 HFA04) with an internal IP address. On the module object I have set the VPN link selection to use the external interface.

I have a SecureClient with Integrity 25 user licensed locally to the module.

When I dial in I can connect OK. When I then hang up and dial in again it says no IKE cert found (something like that). If I then got back to the VPN link selection and change it from use the external IP address to use interface based on topology and install the policy I can then dial in and connect OK, just the once, I then have to change the link selection again.

I have logged a call with our support folks and set them cpinfo from manager and module (they have access to our user centre, so I am guessing that they have looked and seen that all is licensed correctly) they have sent it on to Checkpoint and they have come back and said change the module IP address to the external interface. So;

I thought VPN Link Selection meant you didn't have to do that anymore ?

The license is set to the internal IP address can I simply change the module address and not touch the license because it is against an existing interface ?

Should I do this out of hours ?

Has anyone seen this before ?

Any ideas would be most welcome

Cheers,

George