topic How to use Multiple public IPs different VPN in General Topics

How to use Multiple public IPs different VPN

NorthernNetGuy — Thu, 12 Sep 2024 19:48:38 GMT

Hi,

We have a 6600 r81.20 cluster, and we currently have various VPNs using our primary IP. We have multiple public IPs available in a single subnet, and are looking to have some new site-to-site VPNs use a different IP assigned to a physical interface.

When creating a new star community, i can select the gateway, but is there a best way to select what IP or interface that should be used for the given community? or is this even a supported configuration?

Thank you

Re: How to use Multiple public IPs different VPN

JozkoMrkvicka — Thu, 12 Sep 2024 20:45:27 GMT

Use VSX since each Virtual System can have assigned different IP from the same subnet.

Re: How to use Multiple public IPs different VPN

PhoneBoy — Thu, 12 Sep 2024 21:58:50 GMT

The way to determine what IP is used for VPN is Link Selection: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SitetoSiteVPN_AdminGuide/Content/Topics-VPNSG/Link-Selection.htm
Unfortunately, the options are a bit difficult to work with.

R82 will have the ability to configure the Security Gateway to use different VPN interfaces in different VPN communities.