topic Re: Site to Site VPN wit BGP in Spark Firewall (SMB)

Site to Site VPN wit BGP

pyiephyohtay — Wed, 11 Oct 2023 07:51:27 GMT

Dear All,

Currently, I'm plan to use a redundancy link to same on-premises device site-to-site VPN connection between a Checkpoint SMB 1880 and an Azure Virtual Cloud.

The Checkpoint has a Two Public IP address assigned, In Azure Virtual Network Gateway has Two Public IP address and Active-Active mode configuration with BGP.

I have done configuration for Azure side But i don't understand how to configure VPN with BGP on quantum spark 1800 series.

Does someone have a configuration guide for this, or can you please help me with my issues?

Thanks.

Re: Site to Site VPN wit BGP

G_W_Albrecht — Wed, 11 Oct 2023 07:59:30 GMT

You can run BGP over a route-based VPN by enabling BGP on a virtual tunnel interface (VTI).

See https://sc1.checkpoint.com/documents/SMB_R81.10.X/Dynamic_Routing/EN/Content/Topics/BGP-IPv4.htm?tocpath=BGP%20(IPv4)%7C_____0

Re: Site to Site VPN wit BGP

pyiephyohtay — Wed, 11 Oct 2023 08:16:05 GMT

Dear Albercht,

My current firmware version is R81.10 (996000575), I didn't find the BGP configuration in my firewall setting. Could you please share the step by step configuration guide?

Thanks.

Re: Site to Site VPN wit BGP

G_W_Albrecht — Wed, 11 Oct 2023 08:55:54 GMT

Starting from R81.10.05, you can configure Advanced Routing in the Quantum Spark WebUI. Older versions use CLISH: https://sc1.checkpoint.com/documents/SMB_R81.10.X/Dynamic_Routing/EN/Content/Topics/BGP-IPv4-Configuring-Clish.htm

I do recommend updating to Quantum Spark R81.10.08 build 996001608

Re: Site to Site VPN wit BGP

pyiephyohtay — Wed, 11 Oct 2023 09:15:40 GMT

Thanks for providing the reference guide.