ufpatient.blogg.se - Check point vpn using wrong source ip

These settings are configured in Security Gateway Properties > IPsec VPN > Link Selection. Configuring Outgoing Route Selectionįor outbound traffic, there are different methods that can be used to determine which path to use when connecting with a remote peer. This is only the case when the Link Selection configuration does not use probing. The IP address used by a Security Gateway during a successful IKE negotiation with a peer Security Gateway, is used by the peer Security Gateway as the destination IP address for the next IPsec traffic and IKE negotiations that it initiates.

Remote peers can connect to the local Security Gateway with one of these settings:

Double-click the Security Gateway object.

From the left navigation panel, click Gateways & Servers.

You configure the settings in SmartConsole: There are several ways to configure how a Remote Peer resolves the IP address of the local Security Gateway.

Use Service Based Link Selection to control bandwidth use.Ĭonfiguration settings for remote access clients can be configured together or separately from the Site-to-Site configuration.

Use Load Sharing for Link Selection to distribute VPN traffic over available links.

Use probing to choose links according to their availability.

Link Selection has many configuration options to enable you to control VPN traffic. With the Link Selection mechanisms, the administrator can choose which IP addresses are used for VPN traffic on each Security Gateway. Link Selection is a method to define which interface is used for incoming and outgoing VPN traffic as well as the best possible path for the traffic. Link Selection with non-Check Point Devices