Configure IP pool NAT or Hide NAT to handle return packets.Installation of Endpoint Security requires the user to have administrator privileges. For each backup gateway, define a VPN domain that does not overlap with the VPN domain of the other backup gateways.Ĩ.Make sure that the IP address of the backup gateway is not included in the VPN domain of the primary gateway.To configure the backup gateway that DOES have a VPN domain of its own:.Click the field and select the group or network that contains only the backup gateway.Double-click the Security Gateway and from the navigation tree click Network Management > VPN Domain.To configure the backup gateway without a VPN domain of its own:.Determine if the backup gateway uses its own VPN domain.From the drop-down menu, select the backup gateway.From the navigation tree, click IPsec VPN.The gateway window opens and shows the General Properties page. Click Gateways & Servers and double-click the primary Security Gateway.To configure the backup gateway settings: From the navigation tree, click VPN > Advanced.Ideally I would prefer to set Primary-Backup but I am finding this next set of instructions regarding the backup gateway configuration confusing: Remote Access clients use Visitor Mode instead of RDP to probe gateways." As a result, remote hosts connect to the Security Gateway defined without considering the MEP configuration. When MEP is disabled, MEP RDP probing and fail over are not be performed."To disable MEP, set the following command to true in DBedit, the Check Point database tool:
I have tried disabling MEP but we are still seeing some clients connect via the second site. I think this is Implicit - First to Respond at work.īoth gateways are configured for Visitor Mode. The moment the second gateway was up and configured we started to see some clients connect via it instead of head office. The Remote Access VPN Domains overlap/are the same. The offices are connected via a WAN link. We want this to be used if the internet link at head office fails. We have now configured a new gateway at a second office. It provides Office mode address to Check Point Mobile for Windows clients. We have a gateway at head office configured with Mobile Access and IP Sec VPN. I have been reviewing the 80.20 Remote Access VPN Admin guide to try and understand MEP and I am confused about the best way to proceed.
0 kommentar(er)
