topic Re: VPN S2S with another CheckPoint with 2 ISP in Firewall and Security Management

VPN S2S with another CheckPoint with 2 ISP

rlamerico — Mon, 27 Sep 2021 19:47:03 GMT

Hello Guys,

I need your help with a VPN Case, today I have a VPN site do site between two Check Point (each one is managed by your own manager) and I am using a mesh VPN community.

I need to configure this VPN with both ISP on the second location, I.E location A has one ISP and location B have two ISP and today the VPN is closed with the ISP 1 and as contingency, I need to expand to the second link in case link 1 goes down.

How can configure this second link on VPN ? in my mind maybe just add another gateway on the community with this second ISP, but I am not sure if it will work.

PS. On my location B the ISP is configured on Load Sharing mode and option "Apply settings to VPN traffic" is not marked.

Re: VPN S2S with another CheckPoint with 2 ISP

PhoneBoy — Tue, 28 Sep 2021 06:00:59 GMT

You would need to enable "Apply Settings to VPN Traffic" if you're using ISP Redundancy with VPN.

Re: VPN S2S with another CheckPoint with 2 ISP

rlamerico — Wed, 29 Sep 2021 03:36:02 GMT

Hello PhoneBoy,

I need to apply this option on my site B right? but in my site A, I need to create both objects (peer) with the same topology but different IPs and include both on the VPN community?

Re: VPN S2S with another CheckPoint with 2 ISP

PhoneBoy — Wed, 29 Sep 2021 03:49:06 GMT

Believe so, and configure MEP.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SitetoSiteVPN_AdminGuide/Topics-VPNSG/MEP.htm?tocpath=Multiple%20Entry%20Point%20(MEP)%20VPNs%7COverview%20of%20MEP%7C_____0#Overview_of_MEP