Forum Discussion
kumar_gaurav_32
Nimbostratus
Sep 07, 2018ipsec vpn tunnel in F5 with r77.30 checkpoint firewall
Hi All
Can we make ipsec vpn tunnel in F5 with r77.30 checkpoint firewall.
Feb 05, 2019
I can confirm that it's possible to create an IPSEC tunnel between a F5-BIG-IP and a Check Point firewall. I've been testing this in my lab with R80.10 and it's working. I've noticed that it is key to use PFS in Phase 2. Without PFS in Phase 2 it didn't work. Here are some settings I tried:
Phase 1:
SHA-1/AES-128 + DH Group 2 works!
SHA-256/AES-256 + DH Group 2 works!
Phase 2:
SHA-1/3DES + MODP1024 works!
SHA-1/AES-128 + MODP1024 works!
SHA-1/AES-256 + MODP1024 works!
SHA-256/AES-256 + MODP1024 works!
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects