topic Site2Site DR setup with ASA in Training and Certification https://community.checkpoint.com/t5/Training-and-Certification/Site2Site-DR-setup-with-ASA/m-p/24014#M441 <HTML><HEAD></HEAD><BODY><P>Failover DR related Question.&nbsp;</P><P>We have an established Site2Site VPN connectivity between ASA and checkpoint as in pic (Firewall 1 and Firewall 2)</P><P>we want to have DR tunnel Site2Site VPN (Firewall 1 and Firewall 3)&nbsp;</P><P>Problem is that Site 2 and Site 3 has a layer 2 auto failover using NSX VMware technology and encryption domain is same for these tunnels.&nbsp;</P><P></P><P>What is the best way to achieve this auto failover in case of Firewall 2 site is destroyed..?</P><P>layer 2 failover will only happen if firewall 2 is unresponsive.. or in case a disaster. meaning the failover of Layer 2 IP's will happen to firewall 3. Can i achieve this with same encryption domain IP's? and will ASA be smart enough or a change will be needed there as well.. Open to ideas if someone has worked in a situation like this or if there is an SK which can guide me ..?&nbsp;</P><P></P><P>Thanks&nbsp;</P></BODY></HTML> Tue, 04 Sep 2018 01:34:57 GMT Upraj_Singh 2018-09-04T01:34:57Z Site2Site DR setup with ASA https://community.checkpoint.com/t5/Training-and-Certification/Site2Site-DR-setup-with-ASA/m-p/24014#M441 <HTML><HEAD></HEAD><BODY><P>Failover DR related Question.&nbsp;</P><P>We have an established Site2Site VPN connectivity between ASA and checkpoint as in pic (Firewall 1 and Firewall 2)</P><P>we want to have DR tunnel Site2Site VPN (Firewall 1 and Firewall 3)&nbsp;</P><P>Problem is that Site 2 and Site 3 has a layer 2 auto failover using NSX VMware technology and encryption domain is same for these tunnels.&nbsp;</P><P></P><P>What is the best way to achieve this auto failover in case of Firewall 2 site is destroyed..?</P><P>layer 2 failover will only happen if firewall 2 is unresponsive.. or in case a disaster. meaning the failover of Layer 2 IP's will happen to firewall 3. Can i achieve this with same encryption domain IP's? and will ASA be smart enough or a change will be needed there as well.. Open to ideas if someone has worked in a situation like this or if there is an SK which can guide me ..?&nbsp;</P><P></P><P>Thanks&nbsp;</P></BODY></HTML> Tue, 04 Sep 2018 01:34:57 GMT https://community.checkpoint.com/t5/Training-and-Certification/Site2Site-DR-setup-with-ASA/m-p/24014#M441 Upraj_Singh 2018-09-04T01:34:57Z