Global Protect LSVPN Dual ISP Redundancy

lerewrya — Tue, 20 Nov 2018 14:17:11 GMT

I'm working on configuring a GP LSVPN Hub in our data center with dual ISP's for redundancy. I'm having some trouble finding a best practice guide for this type of configuration. Can anyone give some incite to this configuration? Can I acheive this with a single GP Portal, or will I need the secondary portal available in the event that the primary ISP fails?

Essentially I'm hoping to host 2 portals each with an independant gateway from a single PA220 running PAN-OS 8.1.0 for a satelliteLSVPN configuration.

Re: Global Protect LSVPN Dual ISP Redundancy

mharding — Tue, 20 Nov 2018 14:57:25 GMT

Here's what I did.

I put our GlobalProtect Portal on a loopback interface in the DMZ.

I handle the redundancy throught NAT and DNS load-balancing.

topic Global Protect LSVPN Dual ISP Redundancy in General Topics

Global Protect LSVPN Dual ISP Redundancy

Re: Global Protect LSVPN Dual ISP Redundancy