- Local User Groups
Checkpoint DMZ port is not working for 2nd ISP connection. When i flipped the ISP connection, it was working fine on WAN port. What step should take to make it work?
As I've understood you are speaking about ISP redundancy, because you want to establish the second connection to the ISP.
There are ISP redundancy configuration steps, check it, because you might be have done a little mistake:
1)Open GW or cluster object properties
2)go to the Other>ISP Redundancy
3)select support ISP Redundancy
4)choose the mode : Load Sharing or Primary/Backup
5)Adding ISP links:
1.in the ISP links in order of priority click Add
2.enter the name, interface,next hop IP (it's ISP's IP)
3. repeat 1-2 steps to add one more link.
4. click OK.
Also if you want to configure DNS proxy ro VPN with ISP Redundancy you needs an addditional configuration.
Hope that will help you.
Your steps will not work on a Checkpoint 750 SMB - it has no Dashboard at all 😞 I would rather suggest to check config using Check Point 600/700 Appliances Administration Guide R77.20.80 p.43 !
The default DMZ port of Checkpoint 750 appliance is not working with Redundant ISP connection. When ISP connection on WAN port goes down the DMZ Port does not work as redundant internet connection.
Even if try to get internet directly through the DMZ port, it does not work.
Please explain how you have configured the ISP connections.
Screenshots may be helpful.
Also how did you attempt to "flip" the ISP connection?