Skip to main content
adrianit
New Member
November 15, 2024
Question

How to make a sec vpn tunnel failover 2 ISP ( Internet Service Provider ) to azure vpn

  • November 15, 2024
  • 1 reply
  • 708 views

How to make a sec vpn tunnel failover 2 ISP ( Internet Service Provider ) to azure vpn

 

if primary ISP down automatic switch to secondary  ISP Internet ?

1 reply

saleha
Staff & Editor
Staff & Editor
November 15, 2024

Hello adrianit,

 

Thank you for your inquiry. There are multiple ways to deploy a backup ipsec tunnel including the way the failover happens. The very basic step would be to achieve this with static routes using the following logic:
- setting up backup tunnel static route to the same destination as the primary tunnel with a higher "distance" value than the primary tunnel static route

- as long as the primary tunnel is up, its static route will be always the only active route for this traffic

- once the primary tunnel is down, the backup tunnel takes over as it will become the only available route for the same destinations.

 

Here is an article providing guidance to implement such configuration:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Implement-IPsec-Backup-Tunnel/ta-p/245084

 

Thank you,

saleha