[rasberrystolli]

VPN Setup

What you need to know
• Remote site external gateway (ISP)
• What networks they will allow you to get to
• Create a network object for the remote site’s network. If more than one network create a network group.
• Create an interoperable device. Use this because it doesn’t have to be a checkpoint firewall on the other end. If you use checkpoint firewall you have to specify the version. If this version changes the VPN will break.
• Create interoperable device and specify their remote gateway. Manually define the vpn domain. Put in the remote access group you just created for the remote network. Your firewall also has to have vpn domain manually.
• Create a VPN community add participating gateways- your firewall and theirs
• VPN properties
• VPN – advanced- disable NAT (what ever you use it must match theirs)
• Key exchange AES-256 SHA1 (what ever you use it must match theirs)
• Shared secret click and use shared secret for all external members. Click edit. Enter secret xxxxxx (make complicated) must be the same at each site.
• Set up rules
• Source (your network group and theirs) destination (your network group and theirs) VPN add your VPN community Service Any
• Push policy