VTI - VPN Tunnel ID only from 1 to 99???

[Rafal_N]

Hello,

We are planning to migrate Site to Site VPN form Community Based to Route Based. In documentation R81 I notice that kind of statement that I wasn't aware before:

VPN Tunnel ID - Unique tunnel name (integer from 1 to 99).
Gaia automatically adds the prefix "vpnt" to the Tunnel ID (example: vnpt10).

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/VPN-Tun... 

Is it true that all gateways have limitation max 100 VPN tunnels Route Based only?

Rafal

[Chris_Atkinson]

From a quick test on an R81 gateway the CLI allows you to configure more/higher VPN tunnel IDs.

For an official answer on what's supported please consult with TAC.

[Rafal_N]

I had even working vti 100+ with static route, but I have some strange issues with ospf. After recreating VTI with ID bellow 100 I manage to solve issue. I did dozens different changes and I don't have sure it was coincidence or is it real limitation.

[G_W_Albrecht]

I think that the CLI/WebGUI differences alone would justify a new SK. 

[the_rock]

I did same test as Chris on R81.10 gateway and from cli, you can set higher number. In web UI, I believe only up to 99.

[G_W_Albrecht]

The only limitation i can find documented is: sk31631 - What is the maximum number of interfaces supported by Check Point software? and sk113247 - Maximum number of VLAN and VAPs for Gaia Embedded Appliances

Gaia default total numbers of Physical interfaces, VLAN and VTI interfaces on a machine: 1024