NGX R62 Cluster with LinkProof

[sandeepsutar]

Hello Friends,

I am pretty novice to Checkpoint and currently involved in setting up Cluster on NGX R62. I have gone through several documents and discussions before deployment but stuck at a critical phase.

The scenario is like this,
We are using NGX R62, with External Cluster being addressed on Private IP addresses, the NAT is performed on a Linkproof Loadbalacer.
Linkproof is handling the two different ISPs.
External Cluster address is NATted on the two ISP addresses.

Securemoteclients coming on any of the Linkproof IPs will get forwarded to the External cluster IP.

Now the problem is with the Link selection setting on Cluster.
Do I need to enable NAT on Cluster in this scenario?
What should be Link selection parameters for source address and other settings? We have tried to set it on the External Cluster IP address, but sometime connection fails for securemoteclient and also failover does not work.

Any advice would be highly appreciated,

Thanks,

Sandeep

[bigstyx]

Hello,
we have exactly the same configuration (NGX R62 Nokia Cluster PSO 4.2, Secure CLient R56, LinkProof 4.35.07)
but unfortunatly we don't manage to get a VPN tunnel up and running at all ;
so, as you wrote it works sometimes in you case, I thought you are a bit further than us ;
What did you code for the parameters you referred in your initial post (Link selection, NAT, ...)
I have tried different options but no improvement

thanks in advance
Joel