Dual IPsec Tunnel to same destination with ECMP

lostdragon — Tue, 11 Jun 2019 09:24:18 GMT

Hi everyone,
I would like to set up two ipsec tunnels to the same destination. I know I could do this by assigning the tunnel interfaces different metrics in the VR. But if I do that, only one tunnel will forward traffic at a given time. In our setup traffic needs to actively flow over any tunnel that is up:

Can this be achieved with ECMP? I thought about creating a second VR with both tunnel interfaces being members in it and just enabling ECMP on the VR.We only have 1 WAN interface, does this have to be member of that VR or can it reamin in default VR.

Many thanks in advance for you help

Re: Dual IPsec Tunnel to same destination with ECMP

jeremy.larsen — Tue, 11 Jun 2019 14:45:23 GMT

Are you using any dynamic routing protocol? OSPF? BGP?

Re: Dual IPsec Tunnel to same destination with ECMP

lostdragon — Tue, 11 Jun 2019 14:48:03 GMT

Hi Jeremy, no, at the moment just static routes.

topic Re: Dual IPsec Tunnel to same destination with ECMP in General Topics

Dual IPsec Tunnel to same destination with ECMP

Re: Dual IPsec Tunnel to same destination with ECMP

Re: Dual IPsec Tunnel to same destination with ECMP