Nat for two private IP with one public IP

[sawant.arjun@gmail.com]

Hi,

We have two private internal server ip address and one public IP address.
Requirement is that whenever user from internet access public IP address (203.X.X.X) connection should be go on both the internal server (Like load balancing algorithm- round robin).

We have configure static NAT for two internal server ip address with the same public IP address, but connection coming only on one internal server which is configured first in NAT/rule base.

How can we configure load balancing on checkpoint.
Gateway is VSX 12200.

Thanx
Arjun

[Jejerod]

Hi,

We have two private internal server ip address and one public IP address.
Requirement is that whenever user from internet access public IP address (203.X.X.X) connection should be go on both the internal server (Like load balancing algorithm- round robin).

I'd say you should take a look at sk87641, as you probably want to use a "Logical Server" object for that. Round robin and connection stickyness seem to be supported, but I have no experience with that kind of objects. Most setups I've seen bring their own load balancers.

Note: Check Point does not recommend this, as this feature will be removed. Not sure if it is available in R80+. I'd recommend a real load balancer behind the gateway.

[northlandboy]

That used to be one of those questions that used to get asked in old Check Point exam. I don't think I ever saw anyone ever actually implement it though.

You're better off using a load-balancer. Either commercial, or just use something like haproxy, since it doesn't sound like you need any complex features.