Questions about site-to-site VPN and remote access

[Patrickc]

HI All,

I encountered a problem I'd like to ask everyone about. The client has requested a setup with two ISP link, where one link is dedicated for site-to-site VPN and the other for remote access. Is this feasible? I couldn’t find a related option under link selection. I'd appreciate any assistance. Thank you!

[G_W_Albrecht]

If each ISP has a routable IP this should be no problem, you just have to do the routing right so it is not asymmetric.

[Patrickc]

Hi G_W_Albrecht,

Thank you for your reply. In SmartConsole's Link Selection settings, which option should I choose? Is there documentation describing this? Sorry, I seem to have been unable to find it

Thanks.!

[PhoneBoy · Accepted solution]

If you want a different Link Selection setting for Remote Access, see: https://support.checkpoint.com/results/sk/sk32229 

[Patrickc]

Hi PhoneBoy,

Thanks!

[the_rock]

100% you have to follow what Phoneboy had sent. We did this for a client about 5 years ago and that was the only sk that worked, as you can NOT set link selection for RA clients via smart console gateway onject, only guidbedit.

Andy