Skip to main content
capricorn80
New Member
October 3, 2018
Question

VPN on Backup Internet Link

Hi!

My VPN is working fine on my primary link but due to some need I have to moved it to my backup link.

I have setup my backup link with AD of 20. I cannot ping that IP from outside. I can only see icmp request in the log.

The default route is set to my primary interface gateway so if I change the AD of Backup link to 10 then I lose connectivity to internet.

 So it looks like the backup link doesnt work even though I am setting the interface in my vpn to my backup internet and all the policies are pointing to it.

I only want to have L2tp running on my backup link.

 

How can I achieve this?

 

Thanks

    4 replies

    capricorn80
    New Member
    October 5, 2018

    Update:

     

    I have added the same AD for both route and then set priority of backup route to higher value. By this way I can have both route and I can see both routes in the routing table.

     

    I was setting Policy based routing where my Wifi traffic is going via backup route and it works.

     

    The issue now is that on policy based routing some of the traffic is not working. Like I cannot do SSL VPN from policy based route and L2tp as well. The browsing works fine. I will double check the rules and dig more.

    I have set traffic type in Policy based routing to Any then I guess there should not be any blocking. Also I will rethink is there is more then something involved in this. that from backup link I cannot do ssl and l2tp vpn.

    capricorn80
    New Member
    October 10, 2018

    Anyone?

    tanr
    New Member
    October 10, 2018

    A more complete network diagram and description would be helpful. 

     

    I assume your backup route is going out a different public IP than your main route, correct?  What do you have the source-ip for your vpn set to?  Do you have static routes (with higher priority numbers) both directions?

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT