How to Configure Dual VPNs with Dual ISPs from a Active Active Cluster to a Remote Site

[SSM]

Hello All,

How to Configure Dual VPNs with Dual ISPs from a Active Active Cluster to a Remote Site? Any reference document?

We want to connect first ISP to device 0 on the active/active cluster and connect another ISP to device 1.

Is it possible to do a link load balance with pbf ?

[HULK]

Hello SSM,

Below mentioned docs might help you.

Setup

How to Configure Symmetric Return

Policy Based Forwarding

As per PBF, you can load share traffic based on address/application.

Thanks

[SSM]

Hi Hulk,

I have read these 3 docs but the docs only mention about a single device.

[mbutt]

If you need to setup links to two separate firewalls then you will need to configure active active HA.

Here is a guide that explains the deployment scenarios

Configuring Active/Active HA PAN-OS 4.0

Please ensure that you are not trying to get double capacity by using Active Active because if you have a failure of a device a single device will not be able to hold the load of two firewalls.

Hope this helps.

Thanks

Numan