topic Re: VPN Sites IP address is not updateable dynamically in SASE and Remote Access

VPN Sites IP address is not updateable dynamically

gtsanava — Mon, 08 Feb 2021 13:07:51 GMT

Hello

for Remote Access VPN I have MAIN Site: "VPN.example.com" and it is resolved to IP address: X.X.X.X and everything works fine from that MAIN gateway.

I have also DR gateway and its IP address is: Z.Z.Z.Z

when I want to switch Remote Access VPN traffic from MAIN to DR, I'm updating IP address of "VPN.example.com" to Z.Z.Z.Z

from outside DNS lookup shows that IP address of VPN.example.com is Z.Z.Z.Z

but on my laptop VPN Client shows that VPN.example.com is still X.X.X.X, it does not changes automatically and after that I'm forced to delete and then add site from the beginning and finally VPN Client shows that "VPN.example.com" is Z.Z.Z.Z

what can I do to resolve this issue so on VPN client, site VPN.example.com IP address was updateable dynamically??

Re: VPN Sites IP address is not updateable dynamically

PhoneBoy — Wed, 10 Feb 2021 16:36:55 GMT

Expected behavior.
On first connection, the DNS name is resolved to an IP and that IP is used.
You can set up MEP so the secondary site is used.
More info here: <Redacted Link>

Re: VPN Sites IP address is not updateable dynamically

gtsanava — Wed, 10 Feb 2021 06:54:51 GMT

Hello

Sorry I cant access your link.

I followed this link and it works as I tested : https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk103440

I wish that it was not expected behavior, because of it now I have to delete and re-create site on each VPN user )))))

thanks for your reply

Re: VPN Sites IP address is not updateable dynamically

PhoneBoy — Wed, 10 Feb 2021 16:36:32 GMT

Oops, that's an internal SK, my apologies.