topic IPSEC failvoer not workign with MPLS link in Firewall and Security Management

IPSEC failvoer not workign with MPLS link

PankajTiwari1 — Mon, 14 Nov 2022 10:00:36 GMT

Hello to all.

This is my first post here. I hope you can help me to address the investigation rightly.

SCENARIO

Main Site - Check Point R80.40

VPN Domain - 192.168.10.0/24

Remote site - Checkpoint R81.10

VPN Domain - 192.168,60.0/24

i am facing the issue with MPLS failover with IPSEC VPN.i have two link fist one is ILL( Internet Lease Line) and secondary is a MPLS link. i have to crate the redundancy with with my MPLS network whenever i crate the tunnel my all interface traffice will go through only IPSEC however it MPLS traffic or it is IPSEC traffic. please find the attached Network Diagram and suggest.

Re: IPSEC failvoer not workign with MPLS link

Chris_Atkinson — Mon, 14 Nov 2022 14:48:44 GMT

If you want control by routing metrics, VTI could be an option for you rather than domain based VPNs.

Refer also sk56384.

Re: IPSEC failvoer not workign with MPLS link

PankajTiwari1 — Mon, 14 Nov 2022 14:52:06 GMT

I try this SK but no luck.

Re: IPSEC failvoer not workign with MPLS link

Chris_Atkinson — Mon, 14 Nov 2022 14:56:11 GMT

As above please look into VTI route based VPNs.

It's covered in detail in the VPN Admin Guide.

Re: IPSEC failvoer not workign with MPLS link

PankajTiwari1 — Mon, 14 Nov 2022 15:07:08 GMT

Hello Chris,

thanks for your reply but it is a route based VPN i try with disabling VTI interface but after disabling VTI interface all traffic will forward through MPLS interface but the issue is i am facing high lattancy because it will crated a tunnel over the MPLS link according to SK it is a plan taxt link.