Route-Based VPN Tutorial: Check Point SASE and Check Point HA Cluster

[Shay_Levin]

This video tutorial walks you through the process of configuring a Route-Based VPN between Check Point SASE and a Check Point High Availability (HA) Cluster, using BGP for dynamic routing. You'll learn step-by-step how to set up VPN tunnels, configure BGP, and troubleshoot common issues to ensure a secure and seamless connection.

📄 At the bottom of this post, you'll find two manuals for your reference:
✅ One for the HA Cluster, aligned with the video.
✅ One for a single Quantum Gateway configuration.
For any questions, feel free to reply here!

To view this video, you must Accept and consent to the use of cookies.

Accept

[rasmuswiegman]

Hi Shay,

Thanks for the Video and manuals.

In a real world scenario, the route distribution part doesn't seem to be covered that great.

If you have multiple networks, both via static routes and directly connected, i guess you would have to use routemaps, correct? Or is there another "easier" way of advertising multiple networks, using different protocols?

Rasmus Wiegman 

[Shay_Levin]

You're right there are two options to control BGP redistribution.

The method I demonstrated uses route redistribution, which supports both directly connected networks and static routes.

The other option is to use a route map.