Load balancing on 1530/1550 SMB

[Pedro_Romero]

I know 1530 and 1550 SMB devices only have a single WAN interface, but I need to know if there is a way, maybe through CLI... to use one of the available LAN interfaces as a second WAN/DMZ interface and be able to do load-blancing with those two links, .... and if so will I be able to do a fail-over on VPNs? 

[Chris_Atkinson]

Multiple WAN links and ISP load-balancing are indeed supported. Please refer to the Admin guides for additional info.

[HristoGrigorov]

Please read sk165121 before you enable load-balancing. 

[Pedro_Romero]

Thank you for that info, very valuable. I have ben working with 1180 devices in lab, but I intend to deploy 1500 series .... Do you think this issue is still present on 1530/1550 appliances ?

[HristoGrigorov]

This is not an issue but rather it is like that by design and AFAIK it is applicable to all Gaia and Gaia Embedded versions. If accelerated traffic ('fwaccel stats -s') at the moment is more than 75% then switching to load-balancing will likely make things real slow.

[Pedro_Romero]

I did see the Admin guides and read it is supported. Yet working with 1180 device and I am not able to use LAN ports as WAN interfaces.  

[G_W_Albrecht · Accepted solution]

This feature was not present in R77.20.80 firmware, see sk137212:

What's New in Check Point R77.20.81 for SMB Appliances

This article applies to Check Point 700 / 1200R / 1400 / 910 Small and Medium Business (SMB) Appliances

• Multi-WAN (FleXi Ports)

  • Ability to configure LAN ports as internet access WAN ports.

SMB-6358

Multiple WAN interfaces are not supported on 600, 1100, and 1200R appliances.

In Check Point 1100/1200R/1400 Appliances Locally Managed Administration Guide R77.20.80 p.40ff we read:

You can configure a single Internet connection or multiple connections in High Availability or Load Balancing configurations. 

Interface name - 

• WAN or DMZ is for most types of Internet connections 

• USB/Serial is for cellular or analog modems. 

• ADSL is for 1100 appliances only. The connection type is PPPoE, PPPoA, or EoA 

• ADSL/VDSL. If you select the ADSL/VDSL interface, you must select one of these for the connection type: PPPoE, IPoE - static IP, or IPoE - dynamic IP. 

[Pedro_Romero]

Yes, this is exactly what I needed to confirm, thanyou so much for the info! Very helpfull.