CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 7 of 7

Thread: 3 ISP Load sharing

  1. #1
    Join Date
    2011-10-20
    Posts
    163
    Rep Power
    8

    Default 3 ISP Load sharing

    I have 3 external interfaces here in our company, 2 from the same ISP and 1 from another different one.

    One is a dedicated and two is pppoe. This both pppoe have the same default gw.

    What we want:

    One pppoe and the dedicated on a load sharing ISP Redundancy.

    Another pppoe dedicated to one single network (guest access).

    Is possible to do that?

    I'm getting a problem when both pppoe are enable the PBR doesn't works!

    Any idea?

  2. #2
    Join Date
    2009-04-30
    Location
    Colorado, USA
    Posts
    2,249
    Rep Power
    14

    Default Re: 3 ISP Load sharing

    SecureXL and PBR together are probably not supported with code you are running. Does disabling SecureXL (fwaccel off) resolve the issue? If so, see

    sk109741: Packets are not routed correctly when PBR is configured and SecureXL is enabled

    The hotfix referenced in this SK has been rolled into Take 128 of the R77.30 jumbo, just don't forget to execute the "sim feature pbrroute on" command once the hotfix is installed.
    --
    Second Edition of my "Max Power" Firewall Book
    Now Available at http://www.maxpowerfirewalls.com

  3. #3
    Join Date
    2011-10-20
    Posts
    163
    Rep Power
    8

    Default Re: 3 ISP Load sharing

    Quote Originally Posted by ShadowPeak.com View Post
    SecureXL and PBR together are probably not supported with code you are running. Does disabling SecureXL (fwaccel off) resolve the issue? If so, see

    sk109741: Packets are not routed correctly when PBR is configured and SecureXL is enabled

    The hotfix referenced in this SK has been rolled into Take 128 of the R77.30 jumbo, just don't forget to execute the "sim feature pbrroute on" command once the hotfix is installed.
    Thanks for the reply, but why are telling me about the SecureXL?

    I believe that here is another problem, the problem is that the PBR doesn't work when the two pppoe are enabled.

  4. #4
    Join Date
    2009-04-30
    Location
    Colorado, USA
    Posts
    2,249
    Rep Power
    14

    Default Re: 3 ISP Load sharing

    Quote Originally Posted by crosspopz View Post
    Thanks for the reply, but why are telling me about the SecureXL?

    I believe that here is another problem, the problem is that the PBR doesn't work when the two pppoe are enabled.
    Try it with SecureXL disabled as it can interfere with unusual routing or interface configurations.
    --
    Second Edition of my "Max Power" Firewall Book
    Now Available at http://www.maxpowerfirewalls.com

  5. #5
    Join Date
    2011-10-20
    Posts
    163
    Rep Power
    8

    Default Re: 3 ISP Load sharing

    Quote Originally Posted by ShadowPeak.com View Post
    Try it with SecureXL disabled as it can interfere with unusual routing or interface configurations.
    It's not even enabled :S

  6. #6
    Join Date
    2014-11-14
    Location
    Ottawa Canada
    Posts
    364
    Rep Power
    5

    Default Re: 3 ISP Load sharing

    What version of Checkpoint is in use?

  7. #7
    Join Date
    2011-10-20
    Posts
    163
    Rep Power
    8

    Default Re: 3 ISP Load sharing

    Quote Originally Posted by jdmoore0883 View Post
    What version of Checkpoint is in use?
    R77.30 Gaia

Similar Threads

  1. ISP redundancy with two DMZ and load-sharing
    By johnjohn in forum ISP Redundancy
    Replies: 2
    Last Post: 2011-06-14, 22:30
  2. LOAD SHARING Multicast
    By Sharky in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 13
    Last Post: 2009-10-27, 16:51
  3. LOAD SHARING Multicast
    By Sharky in forum Check Point SecurePlatform (SPLAT)
    Replies: 0
    Last Post: 2008-04-16, 15:10
  4. Help about ClusterXL Load Sharing
    By wiz4rd in forum Check Point SecurePlatform (SPLAT)
    Replies: 5
    Last Post: 2006-11-28, 10:47
  5. Load Sharing config doc anyone?
    By karimi in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 2
    Last Post: 2006-08-30, 08:24

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •