topic Multiple ISP Redundancy will it support in R80 in Firewall and Security Management

Multiple ISP Redundancy will it support in R80

Dhatchina_Murth — Wed, 02 Mar 2016 12:17:37 GMT

Do you we support ISP redundancy more than two ISP in R80

Re: Multiple ISP Redundancy will it support in R80

Tal_Ben_Avraham — Mon, 01 Aug 2016 14:02:19 GMT

R80.10 will not support more than 2 ISPs.

Re: Multiple ISP Redundancy will it support in R80

Dhatchina_Murth — Tue, 11 Jul 2017 10:01:33 GMT

In that case do we have any alternate solution where i can pitch the same

Re: Multiple ISP Redundancy will it support in R80

PhoneBoy — Tue, 11 Jul 2017 14:40:24 GMT

If you can provide a little more details about your specific use case, we can figure out what might be the best approach.

Re: Multiple ISP Redundancy will it support in R80

Dhatchina_Murth — Wed, 12 Jul 2017 04:57:51 GMT

One of our customer using 4 Links ..

Hi,

1 link is dedicated Internet , remaining 3 are MPLS Point to Point Link which is connecting to their DC ..

This 3 Links of MPLS wants load sharing requirement ..

In that case how we can pitch the same.

Re: Multiple ISP Redundancy will it support in R80

PhoneBoy — Wed, 12 Jul 2017 05:33:46 GMT

Check Point's ISP Redundancy assumes both connections will be solely used for Internet traffic.

What you describe sounds different, unless your goal is to use the Internet connections at these various datacenters reachable over MPLS as a backup.

In general, you are probably going to need dynamic routing to achieve this.

Equal cost multipath (ECMP) can be used to "load share" over the MPLS links, but you will have to have routers set up at the other end of the MPLS with the desired routing protocol (either BGP or OSPF depending on preference).

In terms of choosing whether to use the local Internet the MPLS link, I believe you can do this with route priorities (static routes usually have higher priority).

There are likely some limitations with this setup, namely connections will likely break when a failover occurs.

There may be others I'm not thinking of right now.

I recommend working with your Check Point SE offline to fully define the desired traffic flows, requirements, and limitations of your environment.

Based on that, we can come up with a workable solution.