IPSEC VPN with different WAN Link

[Lyaofei]

Hi All,

Just want to check is it possible to form IPSEC VPN using different WAN Link with 3rd party Gateway?

For example

ISP1 <ipsec tunnel> Customer A

ISP2 <ipsec tunnel> Customer B

Thank You

Regards

Yao Fei

[Duane_Toler · Accepted solution]

Yes you can do IPsec VPN via multiple uplinks now.   sk173048 has the configuration details.

Once you configure the registry value and restart, you can set static routes to your external peer and the gateway will set its IKE ID accordingly for that outbound connection as initiator (or to respond for inbound connections as responder).  This also works for VSX (I have it configured for a customer now).

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[PhoneBoy]

The feature in question necessary to accomplish this is called Link Selection.
There is a recent thread that discusses this issue here: https://community.checkpoint.com/t5/Security-Gateways/Change-current-critical-production-VPN-configu...