GP_VPN Disconnection Issue

[tamilvanan]

Hi All,

We are having two ISP connections and configured an GP Portal/Gateway on each ISP connections(Primary Portal/GW on  ISP 1 and Secondary GP Portal/GW on ISP 2).

On firewall the ISP 1 is configured as default route and ISP 2 is configured as back-up default route and path monitoring configured on ISP 1.

We could see in the system logs that the ISP 1 connection goes down and the default route is being removed in the system log entry.

Whenever the above said happens connection with Secondary GPVPN on ISP 2 is lost.

Is this due to the fact that ISP 1 is used as primary default route and ISP 2 as backup and when this goes down it disrupts the Secondary GP VPN connection.

If so will configuring ECMP load balancing on the firewall solves this issue

[TomYoung]

Hi @tamilvanan ,

It is possible that ECMP will solve your issue.  If you enable ECMP and check Symmetric Return, then your GP traffic will be returned on the same interface that it was received.  I think this will work with one primary default route, but I would need to test.  Otherwise, you would need two equal-cost multipath default routes.

Thanks,

Tom