Manual VPN failover.

[SecdetKrypton]

I have a problem — I have ISP redundancy configured, but the redundancy didn't kick in. The issue is impacting me because I have a VPN that I need to bring up over the secondary link. Could you tell me what configuration is needed when you have two links, but you need the VPN to fail over from one to the other? I already tried forcing the link selection, but it's not working. Likewise, I have the "Apply traffic to VPN" checkbox enabled in the ISP redundancy section.

[emmap]

Is this a site to site VPN or a remote access VPN? If it's S2S, is the other end of the VPN also a CP device managed on the same SMS? 

[SecdetKrypton]

S2S and the GWs are managed for the same SMS

[emmap]

When you're making changes are you installing the policy on both gateways? The remote end needs to know about these things too. 

[emmap]

Basically, it should Just Work when both gateways know about the link selection criteria configured on each other.

https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_SitetoSiteVPN_AdminGuide/Con...