Re: failover or bgp vpn between SRX (Site A) to SRX & SSG5 (at same site with same Internal but different ISP )

Hello,

---

 wrote:

 

 

  1) what is the best way to cofigure Site A to SiteB vpn  case A) SSG5 goes down it should work with SRX . SSG is my primay

 

---

The simplest way is to use DPD with "backup gateway" feature - on Site-A SRX210:

security {
        gateway BLAH {
            ike-policy branch-ike-pol;
            address [ 198.51.100.20 203.0.113.30 ];   ##  203.0.113.30 is the backup IKE GW, 
            dead-peer-detection {   ## 203.0.113.30 will be used only when DPD to 198.51.100.20 fails 
                always-send;
                threshold 3;
            }    

---

 wrote:

 

 2) or can i use srx210 with dual ISP at Site B  and eshtablish vpn with site A . Means Site A single GW , site B dual GW with Same intranet  , Can i do this ?

---

Yes You can.

HTH

Thx

Alex