topic One isp to multiple isp site to site tunnel in General Topics

One isp to multiple isp site to site tunnel

vishalrsshah — Mon, 05 Feb 2024 16:35:21 GMT

Hi Team,

We want to configure ipsec site to site tunnel between two locations as per below details

1) Location A having single ISP address i.e Wan address (1.1.1.1/30) will connect to location B having 2 ISP address (2.2.2.1/30 & 3.3.3.1/30) and form a IPsec site to site tunnel.

Is it possible for doing the Same ?. If yes how my traffic at location B will differentiate to which tunnel traffic comes and reverse path should be the same

Re: One isp to multiple isp site to site tunnel

Raido_Rattameister — Mon, 05 Feb 2024 17:07:47 GMT

Check this thread

https://live.paloaltonetworks.com/t5/general-topics/dual-vpn-failover-confusion/td-p/575888

Re: One isp to multiple isp site to site tunnel

OtakarKlier — Mon, 05 Feb 2024 20:54:29 GMT

Hello,

The way I do it is to build the tunnels and then setup OSPF between the two sites and make the metric for one of the tunnels higher than the other. This way OSPF determines which tunnel to use and when. If one is down the other takes over, etc.

There are other ways as well such as Policy based forwarding and symmetric return.

https://live.paloaltonetworks.com/t5/general-articles/policy-based-forwarding-symmetric-return-overview/ta-p/545067

Hope this helps.