- Products
- Learn
- Local User Groups
- Partners
- More
Check Point Jump-Start Online Training
Now Available on CheckMates for Beginners!
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
ZTNA Buyer’s Guide
Zero Trust essentials for your most valuable assets
The SMB Cyber Master
Boost your knowledge on Quantum Spark SMB gateways!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
We have a Load Sharing ClusterXL (Multicast) setup for a while now with IPSec VPN, using OfificeMode IPs.
Previously, when the Cluster (two members active/active so we can utilize both ISP circuits) was running on R77.30 (just a couple weeks ago), everything was working ok.
Since the Cluster was upgraded to R80.10, VPN authentication doesn't work when both members are active.
We are using RSA Tokens for VPN authentication. However, using username/password authentication doesn't work either.
Whichever authentication method we use, VPN authentication fails when both members are active. If we bring down one member (doesn't matter that is member 1 or member 2), VPN authentication works ok, with RSA Tokens and with username and password authentication.
It seems to me there is an issue with the Load Sharing ClusterXL R80.10 gateway (management server is running R80.20).
For now, I have to run cpstop on one member for VPN authentication to work.
Please advise.
Thanks
Looks similar to: Some Remote Access VPN clients are not able to connect to ClusterXL in Load Sharing Unicast mode wit...
Please contact the TAC for assistance.
Thanks for the suggestion.
Tried that with the same result.
We are running ClusterXL Load Sharing Multicast.
We are using IPsec VPN only since we don't have Mobile Access.
Any other suggestion?
Thanks
To be clear, my suggestion was to contact the TAC to assist with troubleshooting.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY