VPN routing

[tmod]

Hi

Does anyone have any experience of routing between a 'remote access' VPN and a 'meshed' VPN? The meshed VPN links all of my company sites and the remote access VPN links our remote users using secureclient to one of our site. I need for all secureclient users to be able access resources on all sites through the meshed VPN. All firewalls are Checkpoint NG AI R55 and the secureclients are all R56. Any help would be greatly appreciated.

Thanks

 

[ChrisAC]

Have a look at the Checkpoint knowledgebase for vpn_route.conf ($FWDIR/conf/vpn_route.conf). In a nutshell, you set your encryption domain at the firewall that your VPN users connect to to be all the networks and then you build manual VPN routing rules on the management server using vpn_route.conf.

Chris.

**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************

 

[tmod]

Thanks for that. That's the route I've been going down, but must have something configured incorrectly in the vpn_route.conf file.