topic weighted static routes on VSX in Firewall and Security Management

weighted static routes on VSX

AleLovaz82 — Fri, 21 Jul 2023 08:15:43 GMT

Hi
I've configured a routed based vpn with AWS ,and this is working fine.

Aws ask for a second tunnel on the same VS.

I need basically to add a second route for the same network with a different next-hop and a different weight.
Is this possible?
i've looked around in smart console and provisioning tool but i wasn't able to find an answer.

Re: weighted static routes on VSX

Chris_Atkinson — Fri, 21 Jul 2023 08:18:44 GMT

This is not possible with VSX in current versions.

Either utilise dynamic routing (BGP) or other approach / topology.

Re: weighted static routes on VSX

AleLovaz82 — Fri, 21 Jul 2023 08:20:12 GMT

😞 😞 ,another limitation of vsx -.-'
thx anyway Chris 🙂

Re: weighted static routes on VSX

Chris_Atkinson — Fri, 21 Jul 2023 08:34:47 GMT

With R82+ changes are planned for VSX so stay tuned for those updates / improvements

Re: weighted static routes on VSX

AleLovaz82 — Mon, 24 Jul 2023 15:16:17 GMT

hi Chris, can you pls point me to some documents that explain how to configure bgp in a vsx enviroment with vti ?

the customer is pushing me to have both the tunnel to aws configured as aws said ,but i wasn't able to find any docs about dynamic routing and vti on vsx.

thx

Re: weighted static routes on VSX

Chris_Atkinson — Tue, 25 Jul 2023 04:14:37 GMT

GAiA CLI commands for BGP in the context of the specific VS should be mostly consistent with the applicable section of this article:

sk108958: How to configure IPsec VPN between on-premises Check Point Security Gateway and Amazon Web Services VPC using dynamic routes and Numbered VTI

Refer also:

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_VSX_AdminGuide/Topics-VSXG/CLI/vsx_provisioning_tool-Adding-VPN-Tunnel-Interface-to-Virtual-Device.htm