Failover of IPSEC Tunnels from active to Passive Firewall

RamKarthik — Tue, 26 May 2020 11:04:45 GMT

Hello,

I have a setup of Two AWS_VM-Series_Palo Alto devices, which are acting as Standalone firewalls but as Primary and Secondary respectively on AWS. Due to some limitations, I cannot configure HA between them, however there is a tunnel connecting these two firewalls for manual traffic failover. Now I would like to setup tunnel monitoring and automatic failover of IPSEC tunnels (with BGP routing) from Primary to Secondary firewall, in case of a tunnel failure on Primary firewall

Any suggestions/examples of such a configuration would be helpful.

Re: Failover of IPSEC Tunnels from active to Passive Firewall

RamprakashRT — Fri, 31 Jul 2020 16:48:59 GMT

HI ,

When you are using BGP tunnel monitoring is not required for failover . Create export and import priority in BGP for Active and Passive tunnels. It should work seamless. Please try and let me know,

Thanks,

Ram

topic Re: Failover of IPSEC Tunnels from active to Passive Firewall in General Topics

Failover of IPSEC Tunnels from active to Passive Firewall

Re: Failover of IPSEC Tunnels from active to Passive Firewall