Configuring GRE Integration

You can route the traffic from a Citrix SD-WAN device to the Internet through GRE tunnels. Check Point inspects the traffic in these tunnels and secures the users in the office.

To configure Citrix SD-WAN GRE on your SD-WAN Device perform these steps:

  1. Configuring the First GRE Tunnel

  2. Creating the Second GRE Tunnell

  3. Routing Traffic through the GRE Tunnels

  4. Deploying Changes

  5. Testing your Configuration

Configuring the First GRE Tunnel

Log in to the Citrix SD-WAN main screen.

  1. On the Citrix SD-WAN main screen go to Configuration > Appliance Settings > Virtual WAN > Connection Editor.

    Example:

  2. Click New > Connections.

  3. Select these settings:

    Example:

  4. Go to Configuration page > Connections tab > GRE Tunnels.

  5. On the right pane of the window click [+] to create the first tunnel.

  6. Set these parameters:

    • Name - An alias for this tunnel. For example, to_check_point_1

    • Source IP - Select and set to the external IP address of your branch device.

    • Destination IP - Set to the Check Point tunnel destination address.

    • Tunnel IP / Prefix - - Set to the tunnel internal subnet.

    Example:

Creating the Second GRE Tunnel

  1. Click [+] to create a second tunnel.

    Repeat Steps 1-6 to create the second WAN link for the second the to_check_point_2 tunnel.

  2. Set these parameters:

    • Name - An alias for this tunnel. For example, to_check_point_2

    • Source IP - Select and set to the external IP address of your branch device.

    • Destination IP - Set to the Check Point tunnel destination address.

    • Tunnel IP / Prefix - - Set to the tunnel internal subnet.

    Example:

  3. Click Apply.

  4. To save your configuration, go to Configuration Editor. Click Save.

    Example:

Routing Traffic through the GRE Tunnels

  1. On the Connection tab select Routes.

    Example:

  2. On the right pane of the window click [+] to create the first route.

  3. In the Add window set these parameters:

    • Network IP Address - Set to 0.0.0.0./0

    • Service Type- Set to GRE Tunnel

    • Gateway IP Address - Set to the first Check Point GRE tunnel destination address.

  4. Click Add.

  5. Click [+] to create a route for the second tunnel.

  6. In the Add window set these parameters:

    • Network IP Address - Set to 0.0.0.0./0

    • Service Type- Set to GRE Tunnel

    • Gateway IP Address - Set to the second Check Point GRE tunnel destination address.

  7. Click Add.

    Note - To activate the tunnels, add a route to reach the GRE Tunnel destination IP address. This service type can be Internet or Intranet.

Deploying Changes

  1. To save your configuration go to Configuration tab > Configuration Editor > MCN Config.

  2. Click Save.

    Example:

  3. Go to Configuration tab > Virtual WAN > Change Management.

    Example:

  4. Click Next.

    Example:

  5. Click Activate Staged.

    Example:

  6. Wait for the activation to complete.

    Example:

To test your Harmony Connect configuration see Testing your Configuration.