topic 2 Tunnel With 2 IP Public. Secondary one is filtered ? in General Topics

2 Tunnel With 2 IP Public. Secondary one is filtered ?

ariiero — Mon, 17 Jun 2024 02:20:45 GMT

I have two IPSec tunnels with 2 ISPs:
ISP 1 is Primary
ISP 2 is Secondary
with a Failover scheme.

But when I set the metric for ISP 1 to 10 and ISP 2 to 200, it seems that the public IP of the second ISP cannot ping the second tunnel's peer gateway, with a message saying the packet is filtered. How can I configure it to keep both tunnels active, but ensure all traffic is handled by ISP 1?

Thanks,

Arie

Re: 2 Tunnel With 2 IP Public. Secondary one is filtered ?

OtakarKlier — Mon, 17 Jun 2024 20:18:21 GMT

Hello,

Here is what I usually do.

Make sure there is a route from your secondary public IP to the VPN endpoint like a /30 or /32. Since its a more specific route, it will take before a default of 0.0.0.0/0. Then you have both tunnels up. Then use whatever routing protocol or Policy based Forwarding with weighted metrics to utilize ISP 1 tunnel over the other.

Hope this makes sense.

Regards,

Re: 2 Tunnel With 2 IP Public. Secondary one is filtered ?

ariiero — Tue, 18 Jun 2024 14:23:30 GMT

Hi ,

Thank you for the answer.. I think the two tunnel are up right now man..

Appreciate it..

Regards,

Arie