Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Dual ISP - First VPN drop causes Second VPN drop

$
0
0

On SRX240, there are two separate ISP each with static IP.  Other end has two different static IPs.  In normal operation there are two separate tunnels up, BGP fills routing table with routes over both VPNs (primary is preferred and active due to prepends).

 

The problem is that when the primary ISP goes out, the secondary VPN interface (st0.20) also shows as down and of course the routing table becomes completely empty of BGP routes.   Secondary ISP remains active on pp0.0 when primary ISP is down.

 

      ge0/0/0.0 - ISP 1 - Primary VPN st0.0 - - - 5.5.5.5
SRX <                                                     > Dest
      pp0.0 - - - ISP 2 - Secondary VPN st0.20- - 6.6.6.6

Viewing all articles
Browse latest Browse all 17645

Trending Articles