Auto-disabled policy route via vpn-tunnel

alexey

Hello again.
We want configurate failover access to some address in internet via 3g USB Modem on remote sites, if ipsec don't connect.
Usually we use 1 or 2 providers vpn, build failover ipsec vpn, and all traffic from remote site goes to central site.
Now we want add 3g USB Modem.
I want do it by 2 policy routes
All from site to vpn-tunnel with auto-disable if ipsec don't connect, with number 1, 
To some address via USB modem with number 2
First rule higher, so it use for all traffic, but if ipsec fall, it disables and work only rule 2 to some address.
But auto-disable for policy routes via vpn-tunnel not available.
How we can realize this scenario?

Zyxel_Emily

Hi @alexey,

 

The function "Disable policy route automatically while Interface link down" is available for interface and trunk only.

For VPN tunnel, you can use VTI interface to establish VPN and configure VTI trunk for policy route.

Zyxel_Emily

Hi @alexey,

 

Can you share your configuration file with us?

I'd like to check the configuration on VPN and policy route.

You can send the configuration file to me via private message.

alexey

Hi Emily.
Send config file in private message.

Zyxel_Emily

Hi @alexey,

 

The function "Disable policy route automatically while Interface link down" is available for interface and trunk only.

For VPN tunnel, you can use VTI interface to establish VPN and configure VTI trunk for policy route.