Automatically Disable VPN interface

Forum|Forum|5 years ago
March 5, 2021
3 replies
4314 views

Hello Everyone,

I don't know if what i want is even possible but here it is. I have a client site with two vpns tunnel to two remote locations. What i want is if the ping to an internal ip address in one of the remote locations is fail i want the vpn interface toward that location to be disable.

Thanks in advance.

VPN

Best answer by emnoc

Yeah I would think you could use SDWAN and ipsla monitor or I would run a dynamic-routing over that tunnel lan2lan.

Also not relevant to your issues, but if you want to manually disable a vpn , set the fwpolicy to disable. Without a policy and without a policy enabled, the IKE negotiation will fail or not happen.

Ken Felix

Toshi_Esumi

SuperUser

It's not clear about your final goal is based on the method you described by "disalbe a VPN". If ping through the tunnel goes done, the tunnel is likely down/diabled already whatever the cause is. Then static routes toward the tunnel would have been disabled/disappeared as well. What's your actual goal you want to accomplish when the tunnel is down, not a method.

emnocAnswer

New Member

Yeah I would think you could use SDWAN and ipsla monitor or I would run a dynamic-routing over that tunnel lan2lan.

Also not relevant to your issues, but if you want to manually disable a vpn , set the fwpolicy to disable. Without a policy and without a policy enabled, the IKE negotiation will fail or not happen.

Ken Felix