I have a customer that wants to add a 3rd headend location. They are currently using phase1 monitoring and DPD to fail over to the backup tunnel should the primary go down. With the addition of the 3rd headend, this phase1 monitoring does not support multiple or chained IPSec backups. Would be easy if backup tunnels were going to the same headend fortigate but in this case they are geographically diverse locations.
Interested in suggestions and if anyone has solved for this.
Thanks,
Aidan
