https://community.checkpoint.com/t5/SASE-and-Remote-Access/How-to-configure-Remote-Access-VPN-with-multiple-external-links/m-p/91112#M10164 <P>Hi PhoneBoy</P><P>&nbsp;</P><P>Thank you for your comment.</P><P>&nbsp;</P><P>To use multiple external links with remote access clients, I have to enable "Support connectivity enhancement for gateways<BR />with multiple external interfaces" right?</P><P><span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="rta 4.png" style="width: 769px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/7212i93193DE7F1C8782A/image-size/large?v=v2&amp;px=999" role="button" title="rta 4.png" alt="rta 4.png" /></span></P><P>And Link Selection under IPSec VPN menu, I just select the address with the primary link, right?</P><P><SPAN>When the primary link goes down for some reason then the backup link becomes an Active, I must re-connect the VPN with External IP of Backup link?&nbsp;</SPAN></P><P>&nbsp;</P><P>Regards,</P><P>Sarm</P> Fri, 10 Jul 2020 09:11:51 GMT Sarm_Chanatip 2020-07-10T09:11:51Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/How-to-configure-Remote-Access-VPN-with-multiple-external-links/m-p/91092#M10162 <P>Hi Check Point Guys!</P><P>&nbsp;</P><P>I'm wondering regarding how to configure Remote Access VPN more than 1 external link,&nbsp; I have Check Point 5400 Appliance with 2 wan links, one is an Active link and the other is the Backup link as the following diagram</P><DIV class="mceNonEditable lia-copypaste-placeholder">&nbsp;</DIV><P><span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="rta1.png" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/7206i534D0440EB2447BA/image-size/large?v=v2&amp;px=999" role="button" title="rta1.png" alt="rta1.png" /></span></P><P>&nbsp;</P><P>I have selected the first primarily as ISP-A from the topology table</P><P><span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="rta 2.png" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/7207i94E36E3E02709F9D/image-size/large?v=v2&amp;px=999" role="button" title="rta 2.png" alt="rta 2.png" /></span></P><P>&nbsp;</P><P>And also configure ISP redundancy with Primary/Backup mode</P><P><span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="rta 3.png" style="width: 898px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/7208iB32C5DC836C0AFF5/image-size/large?v=v2&amp;px=999" role="button" title="rta 3.png" alt="rta 3.png" /></span></P><P>&nbsp;</P><P>I would like to know how to setup Remote Access VPN when the Active link is unavailable and the Backup becomes an Active where the client does not need to reconnect VPN, Can we do that?</P><P>&nbsp;</P><P>Appreciate all comments</P><P>&nbsp;</P><P>Thank you in advance.</P><P>&nbsp;</P><P>Regards,</P><P>Sarm</P><P>&nbsp;</P> Fri, 10 Jul 2020 04:35:41 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/How-to-configure-Remote-Access-VPN-with-multiple-external-links/m-p/91092#M10162 Sarm_Chanatip 2020-07-10T04:35:41Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/How-to-configure-Remote-Access-VPN-with-multiple-external-links/m-p/91093#M10163 Technically it has to renegotiate the VPN since it's now terminating on a different IP.<BR />There are also specific Link Selection options for Remote Access VPN as well.<BR />See: <A href="https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_RemoteAccessVPN_AdminGuide/Content/Topics/14605.htm" target="_blank">https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_RemoteAccessVPN_AdminGuide/Content/Topics/14605.htm</A><BR /> Fri, 10 Jul 2020 04:59:55 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/How-to-configure-Remote-Access-VPN-with-multiple-external-links/m-p/91093#M10163 PhoneBoy 2020-07-10T04:59:55Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/How-to-configure-Remote-Access-VPN-with-multiple-external-links/m-p/91112#M10164 <P>Hi PhoneBoy</P><P>&nbsp;</P><P>Thank you for your comment.</P><P>&nbsp;</P><P>To use multiple external links with remote access clients, I have to enable "Support connectivity enhancement for gateways<BR />with multiple external interfaces" right?</P><P><span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="rta 4.png" style="width: 769px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/7212i93193DE7F1C8782A/image-size/large?v=v2&amp;px=999" role="button" title="rta 4.png" alt="rta 4.png" /></span></P><P>And Link Selection under IPSec VPN menu, I just select the address with the primary link, right?</P><P><SPAN>When the primary link goes down for some reason then the backup link becomes an Active, I must re-connect the VPN with External IP of Backup link?&nbsp;</SPAN></P><P>&nbsp;</P><P>Regards,</P><P>Sarm</P> Fri, 10 Jul 2020 09:11:51 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/How-to-configure-Remote-Access-VPN-with-multiple-external-links/m-p/91112#M10164 Sarm_Chanatip 2020-07-10T09:11:51Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/How-to-configure-Remote-Access-VPN-with-multiple-external-links/m-p/91163#M10165 That all sounds correct. Fri, 10 Jul 2020 17:23:21 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/How-to-configure-Remote-Access-VPN-with-multiple-external-links/m-p/91163#M10165 PhoneBoy 2020-07-10T17:23:21Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/How-to-configure-Remote-Access-VPN-with-multiple-external-links/m-p/227915#M10166 <P>Did you test it? Or maybe you found any other solution?&nbsp;</P> Wed, 25 Sep 2024 14:38:33 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/How-to-configure-Remote-Access-VPN-with-multiple-external-links/m-p/227915#M10166 Maksimus 2024-09-25T14:38:33Z