topic Re: Link Selection Probing for Remote Access VPN - sk113617 in SASE and Remote Access

Link Selection Probing for Remote Access VPN - sk113617

the_rock — Thu, 26 Aug 2021 20:52:27 GMT

Hey guys,

I really want to confirm something 100%. Above sk in the title, we understand and TAC told us this before that automatic failover with ISP redundancy is not supported with remote access VPN, but, to be absolutely sure, does this sk imply that isp redundancy is NOT supported with remote access vpn period, or just link selection part is not supported?

Thanks!

Re: Link Selection Probing for Remote Access VPN - sk113617

PhoneBoy — Mon, 30 Aug 2021 05:20:24 GMT

My understanding is that there is no mechanism on the Remote Access client to know that the gateway has failed over to the secondary ISP.
Which effectively means: Remote Access won't work when the gateway is failed over to the secondary ISP.
There is an internal SK that talks about a not-recommended workaround to this which has some limitations.

I suspect proper support for this would require an RFE.

Re: Link Selection Probing for Remote Access VPN - sk113617

the_rock — Mon, 30 Aug 2021 14:34:20 GMT

Thanks D...we actually do know that, but here is what I need to confirm. As I mentioned in my post, customer understands that automatic failover does not work and its not supported with isp redundancy for RA, BUT, does sk imply that isp edundancy is not supported with RA period, OR just the link selection part is not supported?

Thats actually what I wanted to confirm.

Cheers,

Andy

Re: Link Selection Probing for Remote Access VPN - sk113617

PhoneBoy — Mon, 30 Aug 2021 15:04:32 GMT

The way I interpret it, absent a clear SK to the contrary, is just the Link Selection part that's not supported.

Re: Link Selection Probing for Remote Access VPN - sk113617

the_rock — Mon, 30 Aug 2021 15:06:38 GMT

Thanks as always D, appreciated! Thats exactly how I understood it as well...cheers.

Re: Link Selection Probing for Remote Access VPN - sk113617

Steven_Sultana — Mon, 02 Sep 2024 08:52:10 GMT

The referenced SK seems ... gone.

Does this mean that RAVPN client can now recognize that ISP_A is down and automatically attempts to connect to ISP_B? Is there some configuration needed to achieve this?

Re: Link Selection Probing for Remote Access VPN - sk113617

PhoneBoy — Tue, 03 Sep 2024 12:51:44 GMT

This might help (with a DDNS setup): https://support.checkpoint.com/results/sk/sk103440