topic Remote Access VPN with two External Interfaces in Firewall and Security Management

Remote Access VPN with two External Interfaces

FWNinja — Wed, 18 Nov 2020 15:51:23 GMT

Hi all,

I need to configure Remote Access VPN with 2 External Interfaces.

The customer wants to balance Remote Access VPN connections through these 2 External interfaces (as load sharing method).

MGMT and GWs versions are R80.30.

The scope is:

1-users connect with Endpoint VPN application to vpn.example.com

2-Checkpoint GWs receive all the VPN connections balancing them through the 2 External interfaces (load sharing)

How Cound I do to accomplish it?

Thanks

Francesco

Re: Remote Access VPN with two External Interfaces

G_W_Albrecht — Wed, 18 Nov 2020 16:13:10 GMT

You coul try to configure Link Selection for Remote Clients - see Remote Access VPN R80.40 Administration Guide p134f, but that only gives you probing (of several external iFs), but not load sharing. Afaik this can only be achieved using a load balancer, see sk131612: Remote access VPN link selection with DNS resolving for details.

Re: Remote Access VPN with two External Interfaces

FWNinja — Wed, 18 Nov 2020 17:23:42 GMT

Thank you!

Is there a way with Mobile access?

Thanks and Best Regards

Francesco

Re: Remote Access VPN with two External Interfaces

G_W_Albrecht — Tue, 24 Nov 2020 08:08:04 GMT

No - you can use several external IFs, but no load balancing - that is an available 3rd party product 8).