Home / server / Questions / 151356
Accepted
Fake4d
Asked: 2010-06-16 04:10:16 +0800 CST

Checkpoint - Routing into the tunnel

  • 772

I have a simple question for my checkpoint infrastructure.

Do i have to route a net which i wanna access over a configured firewall VPN Tunnel.

Explanation:

I have two firewalls connected over a VPN which have several nets behind them. I need to access a new net at the other firewall and put them in their encryption Domain. Now here is the question: Do i have to route it in the operating system (SecurePlat)?

Thanks!

vpn firewall linux checkpoint

2 Answers

  1. Best Answer

    The only reason you would need to add a route is if the network on the remote end was not directly connected to the VPN termination on the other end. Otherwise, adding it to the encryption domain on both sides is the only thing you need to do.

    In the event that you needed to put a route in, it WOULD have to be entered in on SPLAT. It's fairly easy to do via the webgui, but you can also do it via sysconfig if you ssh into the Checkpoint.

    • 2

  2. Adding to JakeRobinson's good answer: If you end up doing it via the SPLAT CLI, remember to

    route --save

    (Ask me how I know) There's a nice discussion of manual route management in this CPUG thread.

    • 1