GP_VPN Disconnection Issue

tamilvanan — Thu, 23 Sep 2021 13:39:15 GMT

Hi All,

We are having two ISP connections and configured an GP Portal/Gateway on each ISP connections(Primary Portal/GW on ISP 1 and Secondary GP Portal/GW on ISP 2).

On firewall the ISP 1 is configured as default route and ISP 2 is configured as back-up default route and path monitoring configured on ISP 1.

We could see in the system logs that the ISP 1 connection goes down and the default route is being removed in the system log entry.

Whenever the above said happens connection with Secondary GPVPN on ISP 2 is lost.

Is this due to the fact that ISP 1 is used as primary default route and ISP 2 as backup and when this goes down it disrupts the Secondary GP VPN connection.

If so will configuring ECMP load balancing on the firewall solves this issue

Re: GP_VPN Disconnection Issue

TomYoung — Thu, 23 Sep 2021 21:43:20 GMT

Hi @tamilvanan ,

It is possible that ECMP will solve your issue. If you enable ECMP and check Symmetric Return, then your GP traffic will be returned on the same interface that it was received. I think this will work with one primary default route, but I would need to test. Otherwise, you would need two equal-cost multipath default routes.

Thanks,

Tom

topic Re: GP_VPN Disconnection Issue in GlobalProtect Discussions

GP_VPN Disconnection Issue

Re: GP_VPN Disconnection Issue