ISP redudancy over vpn

[Nishant12]

We have cluster on one cma with dual ISP. And it's creating tunnel to the site B in other cma , how we need if one ISP goes down other will take over

[PhoneBoy]

This is covered in the ClusterXL Docs.
See: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_ClusterXL_AdminGuide/html_fr...

[Nishant12]

Sorry but I am not able to find any topic related to this.

Adding to my first comment, VPN site which connected through same CMA Is working fine but site which is connected through different cma will not failover to other ISP

[Nishant12]

Checkpoint version is R80 .10

[PhoneBoy]

Look up the phrase ISP Redundancy in: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_ClusterXL_AdminGuide/html_fr...

[mdjmcnally]

Configure as External Check Point Gateway, then add both interfaces to the Topology.

Under the VPN Link Selection configure for Use Probing,  High Availability and configure to Probe for the Two IP with the Primary marked.

That way you will probe the two IP and as long as the Primary responds will use.

If doesn't will use the Second Iink for VPN.