[jsalas]

Hi,


We have a simmilar problem,

we have 2 Links and we want the first one to send all traffic but VPN Traffic
(this traffic would be sent through the second link).

we are using two default gateways,

the first with a metric of 0
the second with a metric of 100

using Link Selection from checkpoint:

IP Selection by remote peer
Using Ongoing Probing:

Link 1
Link 2

Primary Link 2 ( The VPN preferred link)

Outgoing Route Selection
When Initiating a tunnel: Route based Probing
When responding to a remotely initiated tunnel


so... with the Site 2 site works fine... but with SecureRemote/SEcureClient fails when we try to update topology... because is sending it by the Link 2, with the highest metric of default gateway.

the Site is created pointing to the Link 1 IP, we connect and works fine... but when we make an Update, fails.


Any idea on how to download the topology... or how to make the correct configuration for link selection...??