CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E

 

Results 1 to 2 of 2

Thread: ISP redundancy VPN failover with externally managed Check Point peer

  1. 2013-01-21 #1
    KrisBogaerts
    KrisBogaerts is offline Junior Member
    Join Date
    2012-12-18
    Posts
    1
    Rep Power
    0

    Default ISP redundancy VPN failover with externally managed Check Point peer

    Hi,

    Is it possible to have ISP redundancy VPN with failover with a remote VPN peer that is not managed by the same Check Point management server?
    What configuration needs to be done on the remote peer to identify the public IP address of ISP-B ?

    On this moment by failover to ISP-B the following message appears in the logs of the remote peer.
    "IKE: No common community for myself and peer"


    Kind regards,
    Kris
    Reply With Quote Reply With Quote
  2. 2013-02-25 #2
    mcnallym
    mcnallym is offline Senior Member
    Join Date
    2007-06-04
    Posts
    3,314
    Rep Power
    20

    Default Re: ISP redundancy VPN failover with externally managed Check Point peer

    On the Externally Managed Gateway Configure both Interfaces in the Topology and set the Link Selection to Probing, set as the two IP's that will be VPN too.

    Your gateway should then see that both External IP belong to the Gateway and Probe both IP's.
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Similar Threads

  1. Check Point R75.40 Interoperable VPN Peer (CISCO ASA 5510) not responding
    By PaRapMC in forum IPsec VPN Blade (Virtual Private Networks)
    Replies: 13
    Last Post: 2013-04-19, 07:49
  2. [VPN] Externally Managed and DAIP
    By Ax_Zisto in forum IPsec VPN Blade (Virtual Private Networks)
    Replies: 0
    Last Post: 2011-05-19, 04:47
  3. Check Point FW1 and Astaro 6.3 Lan2Lan VPN peer ID trouble
    By Joffer in forum IPsec VPN Blade (Virtual Private Networks)
    Replies: 1
    Last Post: 2007-09-19, 11:14
  4. ISP Redundancy failover, impact to outbound non FW hosts
    By Ted Odom in forum ISP Redundancy
    Replies: 3
    Last Post: 2006-12-19, 10:20
  5. Accessing Externally Managed Networks, Via SecureClient
    By budgie69 in forum SecureClient/SecuRemote
    Replies: 8
    Last Post: 2006-05-03, 09:43

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules