Remote Access VPN with two External Interfaces

[FWNinja]

Hi all,

I need to configure Remote Access VPN with 2 External Interfaces.

The customer wants to balance Remote Access VPN connections through these 2 External interfaces (as load sharing method).

MGMT and GWs versions are R80.30.

The scope is:

1-users connect with Endpoint VPN application to vpn.example.com

2-Checkpoint GWs receive all the VPN connections balancing them through the 2 External interfaces (load sharing)

How Cound I do to accomplish it?

Thanks

Francesco

[G_W_Albrecht · Accepted solution]

You coul try to configure Link Selection for Remote Clients - see Remote Access VPN R80.40 Administration Guide p134f, but that only gives you probing (of several external iFs), but not load sharing. Afaik this can only be achieved using a load balancer, see sk131612: Remote access VPN link selection with DNS resolving for details.

[FWNinja]

Thank you!

Is there a way with Mobile access?

Thanks and Best Regards

Francesco

[G_W_Albrecht]

No - you can use several external IFs, but no load balancing - that is an available 3rd party product 😎.