topic Re: Configuring VPN with redundant ISP in General Topics

Configuring VPN with redundant ISP

Thiago — Thu, 05 Apr 2012 19:30:31 GMT

Hi guys,

I want to know it`s possible to configure a VPN with redundant ISP.

I configure the VPN to use a 1 ISP , when this 1 ISP fail , my vpn go to my 2 ISP.

It`s possible to do it ?

Best Regards.

Thiago Lima.

Re: Configuring VPN with redundant ISP

rmonvon — Fri, 06 Apr 2012 00:45:12 GMT

Hi...Are you asking about SSL VPN for mobile users or site-to-site VPN?

Re: Configuring VPN with redundant ISP

Thiago — Sat, 07 Apr 2012 01:22:14 GMT

Site-to-Site

Re: Configuring VPN with redundant ISP

rmonvon — Sat, 07 Apr 2012 01:54:23 GMT

You can create 2 VPN tunnels, 1 tunnel on each ISP, and let dynamic routing handle the failover. Thanks.

Re: Configuring VPN with redundant ISP

Thiago — Wed, 11 Apr 2012 15:32:52 GMT

My other Firewall doesn't support two tunnels for the same network destination. I need establish vpn through link 1, when this link fails the vpn needs renegotiate in link 2.

In the other Firewall (Sonicwall Pro 2040) there are just one Link for internet/VPN. The VPN configuration don't have the IP of peer, it's set 0.0.0.0. No matter what IP Palo Alto uses for initiate VPN, becauses Sonicwall accept any of IP in source.

Thanks

Re: Configuring VPN with redundant ISP

rmonvon — Wed, 11 Apr 2012 16:48:33 GMT

You can try the method discussed here: https://live.paloaltonetworks.com/docs/DOC-3376

Thanks.