Configuring VPN with redundant ISP

[Thiago]

Hi guys,

I want to know it`s possible to configure a VPN with redundant ISP.

I configure the VPN to use a 1 ISP , when this 1 ISP fail , my vpn go to my 2 ISP.

It`s possible to do it ?

Best Regards.

Thiago Lima.

[rmonvon]

Hi...Are you asking about SSL VPN for mobile users or site-to-site VPN?

[Thiago]

Site-to-Site

[rmonvon]

You can create 2 VPN tunnels, 1 tunnel on each ISP, and let dynamic routing handle the failover.  Thanks.

[Thiago]

My other Firewall doesn't support two tunnels for the same network destination.  I  need establish vpn through link 1,  when this link fails the vpn needs renegotiate in link 2.

In the other Firewall (Sonicwall Pro 2040) there are just one Link for internet/VPN. The VPN configuration don't have the IP of peer,  it's set 0.0.0.0. No matter what IP Palo Alto uses for initiate VPN, becauses Sonicwall accept any of IP in source.

Thanks

[rmonvon]

You can try the method discussed here:   https://live.paloaltonetworks.com/docs/DOC-3376

Thanks.