Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Re: Two Policy based VPN with automatic failover

$
0
0

Hi Anand,

 

Basically my design includes two ISP links  with two active  VPN on each ISP which carring traffic from different source subnets  and two backup VPNs on each ISP

Active VPN's

VPN1 on ISP1 - Source Subnets as an example 10.1.1.0/8

VPN2 on ISP2-  Source Subnets as an example 10.2.2.0/8

 

If ISP1 goes down

VPn1 on ISP2

VPN2 on ISP2

 

if ISP2 gies down

VPN1 on ISP1

VPN2 on ISP1

 

 In details,In the link which you have shared  an eample for route based VPN as we are using the st0 interfaces in this example.Based idea behind using the Policy based VPN is becasue I can define few source subnets in the policy rule for VPn1 and few other source subnets  in the policy  rule for VPN2. By this way I will be dividing the traffic on both ISP's via VPN's.

 

Or please let me know if we can do Source based routing in route based VPN, few subnets I will route through st0.0(isp1) and few subnets I will route through st0.1(isp2). and VPN will be failover to st0.1 if st0.0 goes down and vice versa.Can we achieve this if both the ISP interfaces are in  the same virtual routing instance.

 

 

Thanks

 


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>