Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
guesstimation
Participant

Asymmetric Routing

Hi,

We have this route-based VPN with partner. It is static routing with VPN site A as preferred.

Problem that sometimes partner, which is normally on-site A, becomes Active on B site, while our route is still points to A. We see traffic all looks good, just the thing that we send traffic to site A and get it back through site B. Looking at the logs i don't see drops, but users say they have no connection.  Spoofing is not an issue, so not sure what exactly kills the connection.  I assume Asymmetric routing is to blame one way or another.

>Is there any way to live with Asymmetric routing situation in Route Based VPN? 

(At the moment i have only static routing at my disposal, as have some corporate limitations on running dynamic routing on the firewalls.)

Thank you.

 

 

0 Kudos
9 Replies
Vladimir
Champion
Champion

Not sure if this would work, but in static routes, there is a way to configure IP Monitoring with "Force Interface Symmetry". You can play with that option.

guesstimation
Participant

Thanks, this does look like a potential way to resolve this.

0 Kudos
the_rock
Legend
Legend

Learned something new. Never seen that option before @Vladimir . Thanks for pointing that out 🙌

0 Kudos
Timothy_Hall
Champion
Champion

What strange sorcery is this Vladimir? 😀  Never heard of "Force Interface Symmetry" for route IP Monitoring either.  Guess these are things you find out when you write a book or something.

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
0 Kudos
the_rock
Legend
Legend

@Timothy_Hall haha, yea, things you find out when you write a book, not that I would know 😂😂. By the way, both your and @Vladimir 's book...FANTASTIC 👌👍

0 Kudos
Vladimir
Champion
Champion

To paraphrase Forrest Gump: Check Point is like a box of chocolates...

0 Kudos
the_rock
Legend
Legend

There is an idea for CPX slogan ; - )

0 Kudos
Vladimir
Champion
Champion

Yeah, I can see it going well with CP marketing:)

 

0 Kudos
the_rock
Legend
Legend

I know lol. But, in all honesty, me personally, I could care less what company motto/slogan is, as long as the product works and support is good. 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events