An introduction to site-to-site VPN capabilities
Check Point site-to-site VPN topologies are defined in VPN Communities objects and can be a mesh, a star (hub and spoke), or a combination of the two.
Meshed VPN communities are used to interconnect equally important locations. In a mesh, all members have tunnels established between each pair of gateways.
Star, or hub-and-spoke, communities are used for branches or satellite offices connected to central locations. Star VPN communities can be used in one of three modes:
- Split tunnel, with local internet egress and a VPN connection to the networks behind the hub
- The same, but with access to other spokes’ networks
- All traffic routed through the hub
Multiple Entry Point (MEP) configuration options are available to connect spokes to one of several hub gateways using a variety of preference methods, based on the hubs’ availability. A hub’s availability is continually assessed using a proprietary...