VPN Redundancy b/w two Gateways

[Saranya_0305]

Dear Mates,

I am exploring VPN labs, where I want to do VPN redundancy configuration.

In detail,

SG1 and SG2 are Checkpoint devices.

I have configured Route based VPN between two SG1 and SG2 using ISP-1 IP address.

I have two ISP(external) interfaces for example ISP-1 and ISP-2 in each gateway and ISP redundancy is configured where VPN traffic is enabled in ISP configuration.

For example ISP-1 is down or no-link status in SG1 but in SG2 both links are UP, I want to connect the VPN between SG1 and SG2 with out interruption.

I have tried to give High Availability in Link selection mode but still Unable to connect.

So, can you please suggest or provide any sk/document for configuration.

Regards,
Saranya

[Chris_Atkinson · Accepted solution]

Enhanced Link selection with R82 might be an option for you:

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_SitetoSiteVPN_AdminGuide/Content/T...

[the_rock · Accepted solution]

Apart from what Chris said, if you use legacy VRPN, you need to make sure proper routes are present in case of link failure.