Configuring the Passthrough Tunnels for Silver Peak and Check Point

1. In the Silver Peak Orchestrator, click Configuration > Tunnels.

   The Tunnels window appears.

2. Click Passthrough > Edit.

3. In the Edit screen, click Passthrough > Add Tunnel.

   The Add Passthrough Tunnel window appears.

4. Configure the General parameters:

   1. In the Alias field, enter a name for the passthrough tunnel. For example, CP-IPSEC_Tunnel1.

   2. From the Mode, select IPSec.

   3. From the Admin, select up.

   4. In the Local IP field, enter the IP address of the branch office device.

   5. In the Remote IP field, enter the IP address of the Check Point tunnel. See Configuring the SD-WAN Device.

   6. From the NAT list, select none.

   7. In the Peer/Service field enter the name of the BIO service that you created (Atom_IPSEC).

   8. Select Auto Max BW Enabled.

      

5. Click IKE and configure the IKE Phase 1 parameters based on the properties in the Check Point instructions. See Configuring the SD-WAN Device.

   

6. Click IPsec and configure the IKE Phase 2 parameters based on the properties in the Check Point instructions. See Configuring the SD-WAN Device.

   

7. Click Save.

   Repeat this procedure to create three more tunnels. Use two different local IPs for each remote IP address provided by Check Point.

   

A BIO automates the creation of route policies and determines the destination to route a packet. Route policy settings work as exceptions to the BIO configuration.

1. In the Silver Peak Orchestrator, click Configuration > Templates & Policies > Route Policies.

2. View your route policy to make sure your tunnels set up is correct.

   You can create the policy manually, if the automatic creation fails.