topic Re: Redundant VPN with Third Party in General Topics

Redundant VPN with Third Party

Shurik — Tue, 06 Feb 2024 19:33:25 GMT

Hello folks,

I am not able to figure out how to create a redundant site to site VPN tunnel... I tried a few different options, no luck so far.

Our client have two ISPs connected to the same firewall (3rd party). On my side it will be one endpoint.

I am looking for an instant (or almost instant) failover in case there is an issue with any of client's internet circuits.

From your experience, what will be the best way to accomplish it?

Thanks!

Re: Redundant VPN with Third Party

PhoneBoy — Tue, 06 Feb 2024 19:47:45 GMT

You need to configure MEP.
See: https://support.checkpoint.com/results/sk/sk164355

Re: Redundant VPN with Third Party

Shurik — Tue, 06 Feb 2024 20:07:29 GMT

Thank you! How good it's working with 3rd party?

At this point I don't know what will be the client's firewall vendor.

Re: Redundant VPN with Third Party

PhoneBoy — Tue, 06 Feb 2024 23:29:35 GMT

Most of the interoperability issues that occur with third-party VPN gateways occur with getting the VPN established.
The MEP piece is pretty straightforward.

Re: Redundant VPN with Third Party

the_rock — Wed, 07 Feb 2024 00:35:09 GMT

Keep in mind, MEP means you have multiple center gateways, so should not matter what 3rd party fw is.

Andy

Re: Redundant VPN with Third Party

Shurik — Wed, 07 Feb 2024 19:14:18 GMT

Thanks!

So in my case I'm going to configure two remote client's firewalls as center gateways and my gateway as satellite, right?

Re: Redundant VPN with Third Party

PhoneBoy — Wed, 07 Feb 2024 20:47:37 GMT

That sounds correct.

Re: Redundant VPN with Third Party

Shurik — Wed, 07 Feb 2024 20:49:23 GMT

btw, will I see the same source IP, if the traffic is coming over the primary or secondary tunnel?