This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
ABOUT CHECKMATES & FAQ
Create a Post
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Help

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have one, create one now for free!
P_Hippelainen
Explorer
‎2020-05-06 06:31 AM

VPN unnumbered VTI and ClusterXL

Hi there,

I've R80.20 open server cluster env. with ClusterXL and two VPN tunnels between AWS. These are configured with Numbered VTIs.
Now I need to add one VPN tunnel with Azure and there is Route-based or Policy-based VPN available.
I've understand that Route-based should be configured with Unnumbered VTI tunnel.
I found an old Checkpoint exam question from the year 2015 and an answer is that Unnumbered VTIs are only supported VRRP HA active-passive mode.
Is this same HA restriction still valid in R80.x?
I've read the Site to Site VPN Administration Guide R80.20 and all cluster examples is only for numbered VTI.

 

Thanks in advance.

 

0 Kudos
3 Replies
This widget could not be displayed.