CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it yet again - That's right, the 3rd edition is here!
You can read his announcement post here.
It's a massive upgrade focusing on current versions, and well worth checking out. -E

 

Results 1 to 2 of 2

Thread: ISP redundancy VPN failover with externally managed Check Point peer

  1. #1
    Join Date
    2012-12-18
    Posts
    1
    Rep Power
    0

    Default ISP redundancy VPN failover with externally managed Check Point peer

    Hi,

    Is it possible to have ISP redundancy VPN with failover with a remote VPN peer that is not managed by the same Check Point management server?
    What configuration needs to be done on the remote peer to identify the public IP address of ISP-B ?

    On this moment by failover to ISP-B the following message appears in the logs of the remote peer.
    "IKE: No common community for myself and peer"


    Kind regards,
    Kris

  2. #2
    Join Date
    2007-06-04
    Posts
    3,314
    Rep Power
    17

    Default Re: ISP redundancy VPN failover with externally managed Check Point peer

    On the Externally Managed Gateway Configure both Interfaces in the Topology and set the Link Selection to Probing, set as the two IP's that will be VPN too.

    Your gateway should then see that both External IP belong to the Gateway and Probe both IP's.

Similar Threads

  1. Check Point R75.40 Interoperable VPN Peer (CISCO ASA 5510) not responding
    By PaRapMC in forum IPsec VPN Blade (Virtual Private Networks)
    Replies: 13
    Last Post: 2013-04-19, 07:49
  2. [VPN] Externally Managed and DAIP
    By Ax_Zisto in forum IPsec VPN Blade (Virtual Private Networks)
    Replies: 0
    Last Post: 2011-05-19, 04:47
  3. Check Point FW1 and Astaro 6.3 Lan2Lan VPN peer ID trouble
    By Joffer in forum IPsec VPN Blade (Virtual Private Networks)
    Replies: 1
    Last Post: 2007-09-19, 11:14
  4. ISP Redundancy failover, impact to outbound non FW hosts
    By Ted Odom in forum ISP Redundancy
    Replies: 3
    Last Post: 2006-12-19, 10:20
  5. Accessing Externally Managed Networks, Via SecureClient
    By budgie69 in forum SecureClient/SecuRemote
    Replies: 8
    Last Post: 2006-05-03, 09:43

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •