topic Re: Questions about site-to-site VPN and remote access in SASE and Remote Access

Questions about site-to-site VPN and remote access

Patrickc — Mon, 04 Nov 2024 07:00:37 GMT

HI All,

I encountered a problem I'd like to ask everyone about. The client has requested a setup with two ISP link, where one link is dedicated for site-to-site VPN and the other for remote access. Is this feasible? I couldn’t find a related option under link selection. I'd appreciate any assistance. Thank you!

Re: Questions about site-to-site VPN and remote access

G_W_Albrecht — Mon, 04 Nov 2024 08:19:14 GMT

If each ISP has a routable IP this should be no problem, you just have to do the routing right so it is not asymmetric.

Re: Questions about site-to-site VPN and remote access

Patrickc — Mon, 04 Nov 2024 08:25:44 GMT

Hi G_W_Albrecht,

Thank you for your reply. In SmartConsole's Link Selection settings, which option should I choose? Is there documentation describing this? Sorry, I seem to have been unable to find it

Thanks.!

Re: Questions about site-to-site VPN and remote access

PhoneBoy — Mon, 04 Nov 2024 18:04:53 GMT

If you want a different Link Selection setting for Remote Access, see: https://support.checkpoint.com/results/sk/sk32229

Re: Questions about site-to-site VPN and remote access

the_rock — Mon, 04 Nov 2024 23:59:21 GMT

100% you have to follow what Phoneboy had sent. We did this for a client about 5 years ago and that was the only sk that worked, as you can NOT set link selection for RA clients via smart console gateway onject, only guidbedit.

Andy

Re: Questions about site-to-site VPN and remote access

Patrickc — Tue, 05 Nov 2024 05:27:57 GMT

Hi PhoneBoy,

Thanks!