Link to home
Start Free TrialLog in
Avatar of jhunter9999
jhunter9999

asked on

CheckPoint VPN over Wireless Router

I have been connecting with the home office over VPN for many months.   Connection is high-speed cable modem.  Recently installed a NetGear Wireless Router model WGR614 at the house.   Now I cannot even ping servers in the home network.   I can authenticate into the VPN just fine, but for some reason I don't appear to be passing any traffic.   If I simply remove the router and connect directly to the cable modem, things work just fine again.

What am I missing?
ASKER CERTIFIED SOLUTION
Avatar of pseudocyber
pseudocyber

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of jhunter9999
jhunter9999

ASKER

2hype - Is that related to Port Forwarding or Port Triggering?   Is there normally a "open all ports" option on the routers?
The "vpn passthrough" option takes care of the port forwarding.  The "open all ports" option in a SOHO router is known as a "DMZ".  There is usally the ability to define a DMZ machine or physical port on your switch.
Are you using PPTP for your VPN Connection.  Go to the port forwarding on the router and open port  47 and Port 1723 and point them to your computer accepting the VPN connection
Last night I went to the port forwarding config on the router.  the config allows you to setup a custom service, and define a series of port numbers to allow.  First I tried just setting up 47 and 1723 with no success.  I then allowed 1-65000 something.   Whatever the highest port number was.  So, my assumption was that I opened all the ports.   Still cannot even ping my internal network once VPN authenticates.   I checked the firewall log this morning, and there were no drop records indicting that the Firewall had any problem letting me come through.   I'm pretty convinced that the router itself is preventing the traffic.  Any other suggestions?
Did you look for a "vpn passthrough" option?  What kind of VPN tunnel is it - IPSEC, SSL, PPTP, L2TP, etc.
psuedocyber

There was no vpn passthrough" option.   The tunnel is IPSEC.
Huh, don't know what to tell you.  I pulled the manual and don't see any reference to IPSEC or VPN passthrough.  

I use a Linksys Wireless B router at home, and I have a WRV54G at work in a lab - they both work great with Nortel's Contivity Client using IPSEC.  No problems.
pseudocyber/2hype,

Problem solved.  This issue turned out to be a WAN router that is used as the default gateway by internal servers and workstations.   That router had a entry to drop all traffic with 198.162.xxx.xxx.   The Firewall traffic came into the network, but never went back out.   My router support vendor made a config change on the router and it works!

Thanks for the responses.    
Glad you got it solved! :)