topic Re: ISP Redundancy with PBR in General Topics

ISP Redundancy with PBR

jijotms0511 — Tue, 19 Nov 2019 08:59:38 GMT

Hi All,

Can anyone advise if Checkpoint R80.20 can support ISP redundancy with PBR ( PBR presently configured to connect 2 links for wifi users)

Currently ISP redundancy for the main traffic is not configured in the setup and to want to achieve it now? Can anyone advise?

Thanks,

Jijo

Re: ISP Redundancy with PBR

PhoneBoy — Thu, 21 Nov 2019 10:01:22 GMT

ISP Redundancy and PBR are mutually exclusive features.
However, you can achieve some level of ISP Redundancy with PBR functionality starting in R80.30.
Specifically, you can create rules in terms of the default route.

Re: ISP Redundancy with PBR

jijotms0511 — Thu, 21 Nov 2019 12:09:14 GMT

Hi Thanks for your reply. Just to make my question more clear, explaining the scenario here.

> Primary link at site , terminating via switches at one of the interface in checkpoint.Main traffic at the site is going via this link.

> Two other links configured via PBR for 2 different wireless connections at site ( due to a specific requirement)

> Noted the point that from R80.30, we could do some level of ISP redundancy in Checkpoint, but my question is in this scenario with total 3 links in total ( One main primary and other 2 PBR), can we configure a redundancy for the primary link for main traffic using the ISP redundancy feature in Checkpoint?

Thanks,

Jijo

Re: ISP Redundancy with PBR

Eduardo_Eiros — Thu, 21 Nov 2019 12:09:49 GMT

I have made some tests with PBR and ISP (HA) redundancy in R80.30.

PBR still works, meaning traffic is routed by policy rules, but NAT is not performed according "Hide behind gateway" outgoing interface.

NAT is using ISP redundancy primary interface and not real outgoing interface....

Regards

Re: ISP Redundancy with PBR

jijotms0511 — Thu, 21 Nov 2019 12:18:08 GMT

Thanks for your quick reply.

Understood the same now, if NAT not working then it would be an issue. So just to summarize, then this requirement is not feasible now, what I understand.

Re: ISP Redundancy with PBR

Gaurav_Pandya — Mon, 17 Feb 2020 14:16:08 GMT

Hi,

Please check if below steps resolve the issues

https://community.checkpoint.com/t5/Enterprise-Appliances-and-Gaia/Route-specific-subnet-out-second-ISP-interface/td-p/32730

You can hide behind gateway or IP with ISP2 address.