Home
Networks
Integrating On-premises Firewall / Router or Cloud based Resources
Spark Gateways
Configuring Route-Based VPN between Check Point SASE (DAIP) and Check Point Spark Appliance (Locally Managed)
This task explains how to configure a route-based IPSec VPN tunnel between Check Point SASE and a locally managed Check Point Spark appliance and add the required route configuration.
Configuring the Remote ID
Configure the Remote ID (FQDN) in clish and verify the configuration for the VPN site. The procedure also explains how to confirm the tunnel status.

Configuring the Remote ID

Configure the Remote ID (FQDN) in clish and verify the configuration for the VPN site. The procedure also explains how to confirm the tunnel status.

Configuring the Remote ID

Open a CLI session and run clish.
In clish, use the commands to configure RemoteID (FQDN).

In this example, fqdn = spark.cp.
To verify the configuration, run:

show vpn site SASE

The results must display:

fqdn: spark.cp

Now, the tunnel status changes to Up when you send traffic through it.

15 September 2026