Route Based VPN (VTI) through Secondary ISP on Load Sharing Firewalls

[Sbolton]

I have a customer who has an HA pair set to Load-Sharing mode and is on R81.20. A VTI configuration with a third-party that is utilizing Ubiquiti devices. The firewalls are set as Load-Sharing in ISP Redundancy with the VPN check box cleared. The customer wishes to know the following.

How do they configure their route-based VPN to specifically use the secondary ISP connection? Their primary ISP has been having port flapping issues which is affecting the connection from the remote location's device to their network. Hence why they wish to do this. Any recommendations or things I should look out for? Any information would be appreciated.


Thank you

[the_rock]

Sounds like they need to make sure secondary ISP link works right. If 1st fails, does other one take over?

Andy

[Chris_Atkinson]

How is your "link selection" configured currently, believe there were some enhancements with this under R82 per:

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_SitetoSiteVPN_AdminGuide/Content/T...