Connecting to CheckPoint FW1 from a FreeBSD client host

[teterin]

Hello!

There is at least one tutorial on the subject of connecting to a CP-secured firewall from a FreeBSD box using the kernel's IPSEC and Racoon.

But the tutorial talks about certain changes to the server configuration, which I can not possibly do nor request (the organization, as so often happens, only supports Windows users).

Has anyone connected their FreeBSD box(es) to a CP FW1?

What am I to do with the numbers on the token-card given to me by the admins -- it is not part of the password, is it?

Thanks for any advice.

[Bob_Zimmerman]

When you say "token-card", is this a SecureID? If so, I very much doubt that you'll be able to set up your BSD box to connect in via a VPN. The issue is that I've only ever been able to get Racoon to connect as a site-to-site in a Check Point setup and SecureID is used exclusively for remote access VPN connectivity.

[dsb.nepo]

I have done in the past a setup between CPFW and FreeBSD, but switched for VPN to OpenBSD.
Some questions about the topo.
CPFW will have a fix ip?
FreeBSD as client with dynamic IP and VPN auth with SecureID or equivalent? ...
Who manage the FreeBSD gateway? You or the remote site ...

cheers,
dsb.nepo