topic Re: IPSEC VPN with different WAN Link in Firewall and Security Management

IPSEC VPN with different WAN Link

Lyaofei — Thu, 27 Oct 2022 10:40:12 GMT

Hi All,

Just want to check is it possible to form IPSEC VPN using different WAN Link with 3rd party Gateway?

For example

ISP1 <ipsec tunnel> Customer A

ISP2 <ipsec tunnel> Customer B

Thank You

Regards

Yao Fei

Re: IPSEC VPN with different WAN Link

Duane_Toler — Thu, 27 Oct 2022 13:46:52 GMT

Yes you can do IPsec VPN via multiple uplinks now. sk173048 has the configuration details.

Once you configure the registry value and restart, you can set static routes to your external peer and the gateway will set its IKE ID accordingly for that outbound connection as initiator (or to respond for inbound connections as responder). This also works for VSX (I have it configured for a customer now).

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk173048&partition=Advanced&product=IPSec

Re: IPSEC VPN with different WAN Link

PhoneBoy — Fri, 28 Oct 2022 14:43:00 GMT

The feature in question necessary to accomplish this is called Link Selection.
There is a recent thread that discusses this issue here: https://community.checkpoint.com/t5/Security-Gateways/Change-current-critical-production-VPN-configuration-change-gt/m-p/160201