topic ISP redudancy over vpn in Firewall and Security Management

ISP redudancy over vpn

Nishant12 — Sat, 25 Jan 2020 10:16:54 GMT

We have cluster on one cma with dual ISP. And it's creating tunnel to the site B in other cma , how we need if one ISP goes down other will take over

Re: ISP redudancy over vpn

PhoneBoy — Sun, 26 Jan 2020 14:59:22 GMT

This is covered in the ClusterXL Docs.
See: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_ClusterXL_AdminGuide/html_frameset.htm

Re: ISP redudancy over vpn

Nishant12 — Mon, 27 Jan 2020 02:31:13 GMT

Sorry but I am not able to find any topic related to this.

Adding to my first comment, VPN site which connected through same CMA Is working fine but site which is connected through different cma will not failover to other ISP

Re: ISP redudancy over vpn

Nishant12 — Mon, 27 Jan 2020 02:33:53 GMT

Checkpoint version is R80 .10

Re: ISP redudancy over vpn

PhoneBoy — Tue, 28 Jan 2020 16:10:03 GMT

Look up the phrase ISP Redundancy in: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_ClusterXL_AdminGuide/html_frameset.htm

Re: ISP redudancy over vpn

mdjmcnally — Tue, 28 Jan 2020 18:38:37 GMT

Configure as External Check Point Gateway, then add both interfaces to the Topology.

Under the VPN Link Selection configure for Use Probing, High Availability and configure to Probe for the Two IP with the Primary marked.

That way you will probe the two IP and as long as the Primary responds will use.

If doesn't will use the Second Iink for VPN.