Dual IPsec Tunnel to same destination with ECMP


Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.

L1 Bithead

Dual IPsec Tunnel to same destination with ECMP

Hi everyone,
I would like to set up two ipsec tunnels to the same destination. I know I could do this by assigning the tunnel interfaces different metrics in the VR. But if I do that, only one tunnel will forward traffic at a given time. In our setup traffic needs to actively flow over any tunnel that is up:












Can this be achieved with ECMP? I thought about creating a second VR with both tunnel interfaces being members in it and just enabling ECMP on the VR.We only have 1 WAN interface, does this have to be member of that VR or can it reamin in default VR.


Many thanks in advance for you help

Tags (2)
L4 Transporter

Are you using any dynamic routing protocol?  OSPF?  BGP?

L1 Bithead

Hi Jeremy, no, at the moment just static routes.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!