These addresses are only locally significant, and are used to establish the point-to-point connection between the logical Check Point and AWS interfaces, on which VPN nexthop routes will be configured for use. * Note: VTI Local Address (per cluster member) must be different than the addresses provided in the configuration file. Under 'Peer', provide a name to identify the 2 nd VPC tunnel peer (such as AWS_VPC_Tun2).Under 'VPN Tunnel ID', select a different value from the one you selected above (such as 2).Repeat the steps above to create another VPN Tunnel interface using the values provided under the 'IPsec Tunnel #2' section: Under 'Remote Address': provide the 'Inside IP Address' of the 'Virtual Private Gateway' as specified in the configuration file.( This relates to a single gateway configuration.) Under 'Local Address': provide the 'Inside IP Address' of the 'Customer Gateway' as specified in the configuration file.Under 'VPN Tunnel Type' select 'Numbered'.

Under 'Peer', provide a name to identify the VPC tunnel peer (such as AWS_VPC_Tun1).Under 'VPN Tunnel ID', select any unique value (such as 1).In the downloaded configuration file, refer to the 'IPSec Tunnel #1' section. Create a new 'VPN Tunnel' interface, also known as VTI: Navigate to the 'Network Interfaces' tab. Log in to the Gaia Portal of your Security Gateway. Note: If this section is skipped, then occasionally, Security Gateway might lose the VPN tunnel due to the AWS SLA. Part 2 - Check Point OS Configuration on the Security Gateway On premise encryption domain: 192.168.0.0/24 and 192.168.1.0/24Īfter creating the VPN Connection object, click 'Download Configuration'.In the following document we will be using the following notation:.Under 'Static IP Prefix' provide your on premise encryption domain in CIDR notation (multiple blocks can be separated by a comma).Under 'Routing Options' choose 'Static'.Under 'BGP ASN', keep the default value.Under 'IP Address', specify the external IP address of your Check Point Security Gateway (or cluster external virtual IP).In the VPC Dashboard, click 'VPN Connections', and then click 'Create VPN Connection'.

Checkpoint route based vpn