topic Re: ISP Load Sharing with Hub and Spoke vpn in Firewall and Security Management

ISP Load Sharing with Hub and Spoke vpn

Harmesh_Yadav — Sat, 24 Oct 2020 14:41:28 GMT

Dear Team ,

One of my client having Checkpoint Gateways at branch location and HO location has MGMT .

From MGMT to Firewall Connectivity established with Primary ISP at Branch Firewall and MGMT side Nated with MGMT local IP

SO now we have configured ISP redundancy at branch location and its configured as active backup .

All branch having Two ISP and its working fine.

VPN is configured as Star Topology and its configured with All Branch .

Now problem is they need Load sharing on ISP Side , I am wondering will it possible to load sharing ISP in this case - If possible how VPN traffic will move in that case ?

Re: ISP Load Sharing with Hub and Spoke vpn

Harmesh_Yadav — Tue, 27 Oct 2020 10:10:46 GMT

Team , Waiting for your update

Re: ISP Load Sharing with Hub and Spoke vpn

G_W_Albrecht — Tue, 27 Oct 2020 11:08:41 GMT

Did you consult sk32225: Configuring ISP Redundancy so that certain traffic uses specific ISP Link yet ?

Re: ISP Load Sharing with Hub and Spoke vpn

Harmesh_Yadav — Thu, 29 Oct 2020 07:00:29 GMT

Dear Team,

Thanks for reply

Actually my exact question is like when i have configured VPN - it will work under ISP Load sharing mode or it will not work?

Re: ISP Load Sharing with Hub and Spoke vpn

Ramdadam — Thu, 25 Nov 2021 09:18:54 GMT

Hi,

Do not know if you found a solution but I think this could help you sk166897. Other SK are related to your topic and as far as I understood, the minimum requirement to use LS + VPN is to run at least the following:

Check Point R81
Jumbo Hotfix Accumulator for R80.40 starting from Take 69
Jumbo Hotfix Accumulator for R80.30 starting from Take 217
Jumbo Hotfix Accumulator for R80.20 starting from Take 173
Jumbo Hotfix Accumulator for R80.10 starting from Take 283

Rgds,