topic Re: Multiple External links in SASE and Remote Access

Multiple External links

jtorella-chsli — Thu, 27 Aug 2020 22:23:39 GMT

Hello, We have a gateway running Gaia with R77.30. We originally had 1 ISP link which was our outbound internet browsing as well as our Checkpoint Mobile inbound for VPN. This ISP link is starting to get saturated so we installed a second ISP to another interface. We would like our Checkpoint Mobile clients to connect to that new ISP and keep the original link for outbound internet traffic. When I point my Checkpoint Mobile client to the new IP address it connects fine but traffic returning from the firewall back to my remote client now goes over the original ISP and not the new. Obviously my default route is pointing out the original IPS link (1.1.1.1), but how can I force my client VPN traffic out the new ISP link (2.2.2.2)?

Any help would be much appreciated.

Thank you,

Jim

Re: Multiple External links

796570686578 — Fri, 28 Aug 2020 05:23:13 GMT

Hello!

Not sure if this is best practice, but you could just add a route in Gaia for your VPN Client Range to point to ISP 2.

Default Route is probably 0.0.0.0 0.0.0.0 --> 1.1.1.1

If your IP Range for your VPN Clients is 172.16.150.0/24 just add another route

172.16.150.0 255.255.255.0 --> 2.2.2.2

Re: Multiple External links

jtorella-chsli — Sat, 29 Aug 2020 04:46:47 GMT

Hi ConzT,

Thanks but my VPN clients are coming from multiple locations. I would need the outbound traffic to go out the same interface it came in on.

Re: Multiple External links

PhoneBoy — Sat, 29 Aug 2020 06:13:07 GMT

It’s a setting in the gateway object: