topic Load balancing on 1530/1550 SMB in Spark Firewall (SMB)

Load balancing on 1530/1550 SMB

Pedro_Romero — Fri, 17 Jul 2020 15:40:37 GMT

I know 1530 and 1550 SMB devices only have a single WAN interface, but I need to know if there is a way, maybe through CLI... to use one of the available LAN interfaces as a second WAN/DMZ interface and be able to do load-blancing with those two links, .... and if so will I be able to do a fail-over on VPNs?

Re: Load balancing on 1530/1550 SMB

Chris_Atkinson — Sat, 18 Jul 2020 12:32:10 GMT

Multiple WAN links and ISP load-balancing are indeed supported. Please refer to the Admin guides for additional info.

Re: Load balancing on 1530/1550 SMB

HristoGrigorov — Sun, 19 Jul 2020 12:01:00 GMT

Please read sk165121 before you enable load-balancing.

Re: Load balancing on 1530/1550 SMB

Pedro_Romero — Mon, 20 Jul 2020 16:33:50 GMT

Thank you for that info, very valuable. I have ben working with 1180 devices in lab, but I intend to deploy 1500 series .... Do you think this issue is still present on 1530/1550 appliances ?

Re: Load balancing on 1530/1550 SMB

Pedro_Romero — Mon, 20 Jul 2020 16:37:35 GMT

I did see the Admin guides and read it is supported. Yet working with 1180 device and I am not able to use LAN ports as WAN interfaces.

Re: Load balancing on 1530/1550 SMB

HristoGrigorov — Mon, 20 Jul 2020 17:38:38 GMT

This is not an issue but rather it is like that by design and AFAIK it is applicable to all Gaia and Gaia Embedded versions. If accelerated traffic ('fwaccel stats -s') at the moment is more than 75% then switching to load-balancing will likely make things real slow.

Re: Load balancing on 1530/1550 SMB

G_W_Albrecht — Fri, 24 Jul 2020 08:43:46 GMT

This feature was not present in R77.20.80 firmware, see sk137212:

What's New in Check Point R77.20.81 for SMB Appliances

This article applies to Check Point 700 / 1200R / 1400 / 910 Small and Medium Business (SMB) Appliances

Multi-WAN (FleXi Ports)
- Ability to configure LAN ports as internet access WAN ports.

SMB-6358

Multiple WAN interfaces are not supported on 600, 1100, and 1200R appliances.

In Check Point 1100/1200R/1400 Appliances Locally Managed Administration Guide R77.20.80 p.40ff we read:

You can configure a single Internet connection or multiple connections in High Availability or Load Balancing configurations.

Interface name -

• WAN or DMZ is for most types of Internet connections

• USB/Serial is for cellular or analog modems.

• ADSL is for 1100 appliances only. The connection type is PPPoE, PPPoA, or EoA

• ADSL/VDSL. If you select the ADSL/VDSL interface, you must select one of these for the connection type: PPPoE, IPoE - static IP, or IPoE - dynamic IP.

Re: Load balancing on 1530/1550 SMB

Pedro_Romero — Fri, 24 Jul 2020 15:45:35 GMT

Yes, this is exactly what I needed to confirm, thanyou so much for the info! Very helpfull.