topic Re: Dual ISP incoming flow in General Topics

Dual ISP incoming flow

michel_koenig — Wed, 10 Jul 2019 20:32:19 GMT

Hello,

I need to setup an access to a WEB server in DMZ from two different ISP

This is working fine on WEB1 where the router is the default GW

But not from WEB2, the reply packet get out by WEB1

I need some help to setup a policy routing to respond to WEB2 GW if the incoming packet is coming from WEB ISP

Thank you

Michel

Re: Dual ISP incoming flow

Timothy_Hall — Thu, 11 Jul 2019 12:27:34 GMT

Check out the ISP Redundancy feature, which once enabled can do what you want.

Re: Dual ISP incoming flow

michel_koenig — Thu, 11 Jul 2019 12:54:18 GMT

Hello,

Thank you for your reply

I already look at this feature here:

https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_ClusterXL_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/CP_R80.10_ClusterXL_AdminGuide/150990

But my need is more simple, just want to respond to query incoming from ISP2 on the ISP2 and not to the default GW that is on ISP1

I don't like to use ISP2 for outgoing flow

Michel

Re: Dual ISP incoming flow

PhoneBoy — Mon, 15 Jul 2019 03:35:14 GMT

Looks like R3 natting the destination from .33 to .1
If it also translates the source IP to something on the same subnet as that private link, now you have something that won't go out the default route.

Re: Dual ISP incoming flow

michel_koenig — Mon, 15 Jul 2019 08:34:49 GMT

Unfortunately, R3 is a PepLink device that isn't able to law about the source IP

I open a case to PepLink to see if there is a solution

Michel

Re: Dual ISP incoming flow

amdhim0004 — Thu, 30 Jul 2020 21:00:08 GMT

You need to add static route for WEB2. please refer below example/

set static-route WEB2_IP/32 nexthop gateway address (ISP-2 gateway) priority 1 on