CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SecureClient/SecuRemote
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-04-01
Junior Member
 
Join Date: 2008-04-01
Posts: 3
Rep Power: 0
naomi.rampersad@gmail.com has an average reputation (10+)
Default client and site to site vpn not working after introducing peplink device

NGX 62 firewall was functional witha static routable Ip address on the external interface....
a PEPlink device was introduced and the firewall reconfiured with a static non routable ip address which is then natted to a public ip via the peplink, outbound connections are okay and static one-to-one nat for two internal servers is working however cannot connect to gateway via securelcient and also the site to site vpns are not working
when readding the site in the SC configuration the site gets added, certificate comes up but cannot authenicate the user, get a connection to gateway failure...
Has anybody troubleshooted this problem and it may have more to do with the external interace now having a private ip address...
Reply With Quote
  #2 (permalink)  
Old 2008-04-01
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 909
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: client and site to site vpn not working after introducing peplink device

When SecuRemote or SecureClient connect, they download the topology from the firewall as entered in the firewall so it is going to see the private IP address.

What happened to the old public IP address? Is it on the PePLink box?

Have you looked at this article Knowledge Base - PePLink to configure IPSec passthrough?

Ray
Reply With Quote
  #3 (permalink)  
Old 2008-04-01
Junior Member
 
Join Date: 2008-04-01
Posts: 3
Rep Power: 0
naomi.rampersad@gmail.com has an average reputation (10+)
Default Re: client and site to site vpn not working after introducing peplink device

yes the old public ip address now resides on the peplink device so the firewall external private ip address 172.16.0.5 is natted on the peplink device to 200.3.183.45 (public)

No I have not checked out the article, will do so now...
Reply With Quote
  #4 (permalink)  
Old 2008-04-02
Junior Member
 
Join Date: 2008-04-01
Posts: 3
Rep Power: 0
naomi.rampersad@gmail.com has an average reputation (10+)
Default Re: client and site to site vpn not working after introducing peplink device

I am working with a customer that has a vendor that put in the Peplink device, I spoke with him, showed him the article and he verified that it is all setup on the peplink device...
The problem seems to be that the IKe hnadshake is not being completed...
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 12:22.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0