double fail-over WAN and VPN

Orad
Orad Posts: 16
in Security
Hello,
We have 2 sites connected with VPN, ATP units on both locations.
Each site has 2 ISP connected for fail over, and fail over configured Trunk - LeastLoad First, Inbound+Outbound. Second ISP in passive.
I would like to have VPN working, no matter which provider fails.
What is the best way to realize that?
I saw this article 
How to Use Dual-WAN to Perform Fail-Over on VPN Using the VPN Concentrator – Zyxel Support Campus EMEA
In my case, when only 2 sites, and not 3, do i need to configure a concentrator or is adding Secondary IPs to VPN Gateway setup(on both ends) is enough?
Thank you

Best Answers

  • Zyxel_Emily
    Zyxel_Emily Posts: 896  Zyxel Employee
    edited November 2021 Answer ✓
    Hi @Orad,

    You can find the topic "How to Create VTI and Configure VPN Failover with VTI
    " in the handbook.
  • Zyxel_Emily
    Zyxel_Emily Posts: 896  Zyxel Employee
    Answer ✓
    Hi @Orad,
    In this example, only two VPN Gateway are configured on each device: 
    HQ_wan1------BO_wan1
    HQ_wan2------BO_wan2
    If you need full redundancy in case HQ_wan1 and BO_wan2 are disconnected at the same time, you need to add extra two VPN Gateways, corresponding VPN tunnels and extra two VTI interfaces.
    HQ_wan1------BO_wan2
    HQ_wan2------BO_wan1

All Replies

Categories

Security Highlight


Read more

Security Help Center

  • FAQ
  • New & Release
  • Monthly Express
  • Threat Intelligence
  • Video Tutorials
    • EnglishРусский中文（台灣）