topic Re: Single gateway with 1 ISP built site-to-site VPN to remote 3rd party gateway with 2 ISPs in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Single-gateway-with-1-ISP-built-site-to-site-VPN-to-remote-3rd/m-p/200886#M37742 <P>Look at MEP.<BR /><A href="https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SitetoSiteVPN_AdminGuide/Content/Topics-VPNSG/MEP.htm" target="_blank">https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SitetoSiteVPN_AdminGuide/Content/Topics-VPNSG/MEP.htm</A>&nbsp;</P> Mon, 18 Dec 2023 13:21:24 GMT PhoneBoy 2023-12-18T13:21:24Z Single gateway with 1 ISP built site-to-site VPN to remote 3rd party gateway with 2 ISPs https://community.checkpoint.com/t5/Firewall-and-Security-Management/Single-gateway-with-1-ISP-built-site-to-site-VPN-to-remote-3rd/m-p/200809#M37725 <P>Our company is using one standalone Checkpoint gateway and had already built one site-to-site VPN to branch office which is using a 3rd party gateway.</P><P>Now the branch office had added one more ISP, which make them have two public IPs from two different ISPs. They want to build one more VPN to us, and if their first ISP link failed, they will failover to the 2nd one and VPN tunnel remain function.</P><P>So the situation is as below:</P><P>Head Office: single gateway with 1 ISP (1 public IP)</P><P>Branch Office: single 3rd party gateway with 2 ISPs (2 different public IPs)</P><P>How Checkpoint need to setup to fulfill this requirement?</P><P>From previous posts, I saw someone suggested build 2 VPN tunnels with route-based VPN. Could someone provide some ideas or guidelines is this approach working? Thanks.</P> Sat, 16 Dec 2023 14:44:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Single-gateway-with-1-ISP-built-site-to-site-VPN-to-remote-3rd/m-p/200809#M37725 Andy1977 2023-12-16T14:44:17Z Re: Single gateway with 1 ISP built site-to-site VPN to remote 3rd party gateway with 2 ISPs https://community.checkpoint.com/t5/Firewall-and-Security-Management/Single-gateway-with-1-ISP-built-site-to-site-VPN-to-remote-3rd/m-p/200886#M37742 <P>Look at MEP.<BR /><A href="https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SitetoSiteVPN_AdminGuide/Content/Topics-VPNSG/MEP.htm" target="_blank">https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SitetoSiteVPN_AdminGuide/Content/Topics-VPNSG/MEP.htm</A>&nbsp;</P> Mon, 18 Dec 2023 13:21:24 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Single-gateway-with-1-ISP-built-site-to-site-VPN-to-remote-3rd/m-p/200886#M37742 PhoneBoy 2023-12-18T13:21:24Z