L2 Routing / Checkpoint 1530

[Burak_Ece]

Hello,

I have two L2 Routing lines. Checkpoint 1530 appliances connect to the internet from the center. However, I can only connect them with the WAN IP addresses. There is only one WAN IP address shown in Checkpoint Management, so when the connection is interrupted, the second line doesn't work.

What do I need to do to connect to Checkpoint Management using the management IP address of the 1530 appliances?

Checkpoint Management Version : 81.10

Checkpoint 1530 Appliances Version :81.10

Thanks.

[the_rock]

Hey @Burak_Ece 

Do you happen to have basic diagram of the setup and what exactly fails?

[PhoneBoy]

Neither version is specific enough.
For management, there should be a JHF level.
For the 1530, there is a number after R81.10 (e.g R81.10.17).

When you say "the second line doesn't work" what exactly does that mean?

[AkosBakos]

Hi @Burak_Ece 

Maybe you described around the ISP redundancy feaure?

[the_rock]

Hey brother, long time no see on here, hope you are well!

Yes, that certainly makes sense to me too.

[Burak_Ece]

Hello, 
yes, I want to explain the ISP's redundancy. 
There are two WAN IP addresses here. One of the WAN IP addresses is listed as management.
 When I switch to the other line, the CP Management connection is disconnected. 
Therefore, since I access the internet from the headquarters, my connection is disconnected, 
and the branch office can't access the internet. I can't even reach the branch gateway.

Checkpoint Management:81.10 Take 177
1530 appliances :R81.10.17 (996004508)

Sorry for the late conversion

[the_rock]

What is the default gateway when you flip over to the 2nd connection?

[PhoneBoy]

We've addressed this issue on non-SMB gateways: https://community.checkpoint.com/t5/Management/ISP-Redundancy-and-Pushing-Policy-when-Failed-over-to...
That speaks to pushing policy from management, though, and it sounds like you have a different issue.

I don't understand "since I access the internet from the headquarters, my connection is disconnected, and the branch office can't access the internet."
More details about your environment are needed.
Network diagrams and screenshots (with sensitive details redacted) will help.

[Burak_Ece]

Diagram

[the_rock]

Wait...is there VPN between 2 sites or how are they connected?

[PhoneBoy]

What is the exact connection between these two sites?
Is there a VPN involved?
You have two distinct paths from GW2 to the 1530 (through Router1 and Router2)...how does GW2 know which path to use?