topic Re: Multiple VPN choice for remote access vpn in SASE and Remote Access

Multiple VPN choice for remote access vpn

freeman91 — Wed, 29 Jan 2025 14:57:38 GMT

Hi,

I am looking for manual/guide how to setup track.defaults file to have two public IP addresses or VPN name, so when one gateway at location A become unavailable, user can switch to vpn2.site.com to the second gateway that is located in the other country.

Both gateways are under one management server.

Re: Multiple VPN choice for remote access vpn

G_W_Albrecht — Wed, 29 Jan 2025 15:18:48 GMT

R81.20 Remote Access VPN Administration Guide - Multiple Entry Points for Remote Access VPNs

Re: Multiple VPN choice for remote access vpn

the_rock — Wed, 29 Jan 2025 20:37:51 GMT

What Guenther sent is exactly what you need to follow. I had to do this for few customers in the past.

Andy

Re: Multiple VPN choice for remote access vpn

freeman91 — Thu, 30 Jan 2025 08:50:14 GMT

Thank you, but I am looking for something more simple then this, if there is something.

So I want to create track.defaults file, end put that in VPNConfig editor so client with new instalation will already have two IP addresses populated in VPN mobile client.

I am not sure was I clear enough?

Re: Multiple VPN choice for remote access vpn

G_W_Albrecht — Thu, 30 Jan 2025 10:32:20 GMT

Sorry - only possible way is using $FWDIR/conf/trac_client_1.ttm file that will be downloaded by each RA VPN client - you can contact CP TAC to verify.

Re: Multiple VPN choice for remote access vpn

freeman91 — Thu, 30 Jan 2025 10:42:01 GMT

Thank you for fast respond.

How about to on fresh new installation of Check Point VPN client, to add both public IP address, verify connections, and then use that trac.config and trac.defaults files along with other fresh new VPN installation in VPNconfig app to make new .msi intallation with preconfigured IP addresses.
Then deploy that .msi to the clients.

Will I face any problem with this approach?

Re: Multiple VPN choice for remote access vpn

the_rock — Thu, 30 Jan 2025 12:42:23 GMT

I had customers do that, works as well.

Andy