Dennis Pham wrote:
Hello everyone,
I have CheckPoint NG with AI R55 and it used to be on a DSL line with one public IP address. I was able to VPN into the internal network and everything worked fine. My T1 finally arrived and I switched everything over to the T1 IP address and my site to site VPN is working fine but I can't seem to do a client to site VPN. I will get an error that it is unable to communicate with the gateway everytime I try to VPN into my network from home with my laptop. I have checked the policy and the IP configuration and the routes and everything seems fine. So what I did to test the VPN was to connect the old DSL line back into the firewall along with the T1 and when I got home I was able to connect via VPN. But when I check the SecurClient I see that it is connected to the IP address from the T1. Is it somehow trying to authenicate using the old DSL IP address? Is there a file or cache somewhere that is holding the old DSL IP address? Or is there another solution? Any help would be appreciated.
thanks in advanced, Dennis
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
It's a common misconception that you won't have to recreate a site when your ip address changes on the firewall. When you setup SR/SC with a domain name <yourdomain.com>, it immediates resolves that name and uses the IP. It doesn't resolve the name ever again, instead uses the IP address of the resolved name when the site is created. Recreating the site should resolve your issue.
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
