Hello All,
I have a need to implement MEP for S2S VPNs. I have been reviewing the Site to Site VPN Admin Guide. I have concerns that what we want to achieve will not be supported. The diagrams in the VPN Guide seem to all indicate routing is done in between Host-1 and Host-3 and the secure gateways with the IPsec connectivity:
![Topology.png Topology.png](https://community.checkpoint.com/t5/image/serverpage/image-id/8717i0A9C7B06ACF4386E/image-size/small?v=v2&px=200)
We are using the security gateways for network segmentation as well as perimeter security with Internet access. It MEP still possible with this topology?
![Drawing1.png Drawing1.png](https://community.checkpoint.com/t5/image/serverpage/image-id/8716iEF4D02E21AB72875/image-size/small?v=v2&px=200)
Or if the Internet access is down on M2, will the traffic from Host-1 blocked from reaching M1, while M2 continually tries to reactivate the IPsec tunnel to S1?
Many thanks,
Michael