Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
harshasm
Participant

BGP global settings

just for a clarification, 

we have implemented an several VPN tunnels via our primary ISP link and the environment has another backup ISP link. 
we have tested it with backup ISP link, it is not getting up for any tunnel configuration. (R82.10)

- checkpoint tot checkpoint - Not working
- checkpoint to third party - Not working
- with different backup ISP - working 
- with different vendor isolated firewall with same ISP link - worked

final scenario is only This specific ISP link is not working with Checkpoint firewall only.

backup and primary Links are provided by the same vendor. 

1. what is needed to verify that the below BGP global setting with single route ID and AS number for all advance routing can be a reason to fail the Tunnel establishment. 

2. do I need to config this via peer groups only? 

 
 

Screenshot 2026-05-19 193752.jpg

Thankyou

 

0 Kudos
2 Replies
simonemantovani
MVP Gold
MVP Gold

Hello

before establishing BGP, you need to have the tunnel UP, there is no relationship between BGP and VPN; so the first step is to understand why the secondary vpn is not working; did you collect any vpn debug and tcpdump capture to verify if there is communication between the gateways and in case if there are any error about vpn negotiation?

0 Kudos
harshasm
Participant

Hello simonemantovani , 

thank you for kind feedback, 

TAC was collected the Debug, and they are investigating the logs.
The communication has been success between the peer and the source device. checked with Ping. 

error Log is: IKE failure, initial exchange failed due to time out 

 

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events