topic Re: How to Configure Dual VPNs with Dual ISPs from a Active Active Cluster to a Remote Site in General Topics

How to Configure Dual VPNs with Dual ISPs from a Active Active Cluster to a Remote Site

SSM — Thu, 29 May 2014 04:53:55 GMT

Hello All,

How to Configure Dual VPNs with Dual ISPs from a Active Active Cluster to a Remote Site? Any reference document?

We want to connect first ISP to device 0 on the active/active cluster and connect another ISP to device 1.

Is it possible to do a link load balance with pbf ?

Re: How to Configure Dual VPNs with Dual ISPs from a Active Active Cluster to a Remote Site

HULK — Thu, 29 May 2014 05:09:42 GMT

Hello SSM,

Below mentioned docs might help you.

Setup

How to Configure Symmetric Return

Policy Based Forwarding

As per PBF, you can load share traffic based on address/application.

Thanks

Re: How to Configure Dual VPNs with Dual ISPs from a Active Active Cluster to a Remote Site

SSM — Thu, 29 May 2014 06:52:18 GMT

Hi Hulk,

I have read these 3 docs but the docs only mention about a single device.

Re: How to Configure Dual VPNs with Dual ISPs from a Active Active Cluster to a Remote Site

mbutt — Thu, 29 May 2014 15:53:54 GMT

If you need to setup links to two separate firewalls then you will need to configure active active HA.

Here is a guide that explains the deployment scenarios

Configuring Active/Active HA PAN-OS 4.0

Please ensure that you are not trying to get double capacity by using Active Active because if you have a failure of a device a single device will not be able to hold the load of two firewalls.

Hope this helps.

Thanks

Numan