07-31-2024 04:04 AM
How do I best configure a backup IPSEC endpoint in an IPSEC tunnel if the primary endpoint goes down?
NOTE : Palo Alto on both sides
07-31-2024 04:18 AM
you can use an FQDN instead of an IP and then rely on dynamic DNS to switch the tunnel over, or you can create a second ike gateway and ipsec tunnel with secondary IP addresses (2 active tunnels) and use policy based forwarding for example to pick the preferred tunnel
07-31-2024 05:57 AM
It would be more convenient to do it using IP addresses (2 active tunnels), but when the tunnels are down, will it automatically switch to the other one or do I have to do it manually?
Is there a document I can review about this?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
