topic Re: i want to remote VPN on one link and site to site IPSEC on separate link in Firewall and Security Management

i want to remote VPN on one link and site to site IPSEC on separate link

anukaravintha1 — Sun, 12 Jan 2025 05:02:32 GMT

My setup,

ISP1 - This is for Site to Site VPN

ISP2 - This is also for Site to Site VPN with different peer

ISP2 - This is for remote VPN

Please advice me to do the link selection configuration

Re: i want to remote VPN on one link and site to site IPSEC on separate link

PhoneBoy — Mon, 13 Jan 2025 20:43:36 GMT

This is typically handled through the Link Selection setting, which will be impacted by whether ISP Redundancy is used or not.
In R82, you can set this per VPN Community in a much more obvious way.
In earlier releases, you will have to do this based on Routing (Calculate based on Network Topology + configuring appropriate routes out ISP2).

For Remote Access (which does it differently), see: https://support.checkpoint.com/results/sk/sk32229

Re: i want to remote VPN on one link and site to site IPSEC on separate link

CheckPointerXL — Wed, 29 Jan 2025 08:11:03 GMT

i'd stick link selection to ISP2 and then configure appropriate /32 routing on isp1 for specific vpn to avoid applying sk32229

Re: i want to remote VPN on one link and site to site IPSEC on separate link

PhoneBoy — Thu, 30 Jan 2025 03:17:41 GMT

Believe you still need sk32229, but not 100% certain of this.