topic Re: Multiple internet links in General Topics

Multiple internet links

clemylton — Thu, 21 Jan 2021 19:12:40 GMT

Hi guys

I have 4 servers on my LAN, protected by the checkpoint. And I have 4 internet links. how could i configure the servers to navigate the internet using only one of each link? what features should i use?

I need that each must have its exclusive access to the Internet using only one of the links.

Can someone help me?

Thanks!

Re: Multiple internet links

PhoneBoy — Fri, 22 Jan 2021 02:18:03 GMT

That largely depends on what Check Point product you have and version/JHF level.
But I would assume it would involve policy-based routing.

Re: Multiple internet links

G_W_Albrecht — Fri, 22 Jan 2021 09:21:13 GMT

I second that, look here:

sk100500: Policy-Based Routing (PBR) on Gaia OS

sk167135: Policy-Based Routing and Application-Based Routing in Gaia

Re: Multiple internet links

clemylton — Fri, 22 Jan 2021 17:17:03 GMT

Hi,

Thanks for your reply. Im running R80.40. Im very confused about static routes and PBR.

All my internet links are configured in my default route. I've tried several configurations using PBR but no success so far.

My doubt is how to set one especific internet link as gateway for a specific server.

Re: Multiple internet links

PhoneBoy — Fri, 22 Jan 2021 17:26:12 GMT

If you can provide a bit more details about your precise networking configuration and precisely what you’ve tried, we might be able to provide more precise guidance as to what to do.

Re: Multiple internet links

clemylton — Fri, 22 Jan 2021 18:07:39 GMT

Hi,

Consider de image below, please;

I need the traffic from server 1 to be routed only through link 1 (inbound and outbound), and so for the other servers too;

Server 1 <-in and out-> Link 1

Server 2 <-in and out-> Link 2

Server 3 <-in and out-> Link 3

Server 4 <-in and out-> Link 4

This is my default route;

And these are my PBR configurations;

These PBR are working just to temporary external access. I'll remove them as soon as i understand how can i set it all up.

PS: Sorry, i'm just trying to be as clear as i can.

Thanks!

Re: Multiple internet links

PhoneBoy — Fri, 22 Jan 2021 18:13:21 GMT

What's not clear from the above is what precise interfaces are available and how they relate to the servers (less relevant) and the Internet connections (most relevant).
Is this correct that all four internet links are available from the same PPPoE interface?

Re: Multiple internet links

clemylton — Fri, 22 Jan 2021 18:23:06 GMT

Oh, ok.

So, i have one internet link for each interface respectivelly;

Link 1 -> eth0

Link 2 -> eth3

Link 3 -> eth6

Link 4 -> pppoe1

I created only the default route containing all four gateways just to have Internet redundancy.

Re: Multiple internet links

clemylton — Thu, 28 Jan 2021 14:23:49 GMT

Hi guys,

Any ideas? I'm really stuck.

Any help will be much appreciated!

Re: Multiple internet links

PhoneBoy — Thu, 28 Jan 2021 16:43:22 GMT

Where are the routes for the specific sources to "any" in the above?
If you want a specific source to use a specific default route, it starts there.
You may also need NAT rules for each server so the return traffic comes to an IP served by the correct ISP.
If you don't want to go through the precise details in public, I recommend discussing with the TAC.