ipsec tunnel r81.20

[bhattprem]

check point is behind the gateway and we have 3 isp , we are using three tunnels(community), in firewall we have two external gateway traffic forwarding to internet , we want two tunnel community traffic from both the external interface as per our choice how to select or decide interfaces in community

[Chris_Atkinson]

Support for R81.20 will end next year as such would suggest exploring upgrades to a version that supports Enhanced Link Selection i.e. R82 or above.
https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_SitetoSiteVPN_AdminGuide/Content/T... 

[Martijn]

Hi,

I assume ISP Link Selection configured? 

The simple way to configure this, is by creating static routes to the external VPN Peer IP's.

I have created such a setup some time ago. Customer had a lot of site-to-site VPN's and was migrating to a new ISP.
Current ISP router was configured as the default gateway of the firewall. We configured ISP Link Selection and could migrate one  VPN a the time.

- Contacted the 3rd party to change their VPN Peer IP to the customer's new ISP.
- Configured a static route to the 3rd party VPN Peer IP via the new ISP.

I think you can to the same to configure a certain  VPN will use certain ISP.

Martijn