Backup IPSEC VPN to different remote-gw

[ashley]

Hi I need to build a redundant VPN from Site 1 (DR Center) to Site 3 (Backup Site). I already have a tunnel to site 2 (Main Data Center). This tunnel would allow Site 1 access to our WAN via the Backup site in the event we loose Site 2. Are there any configuration examples? Is this a Partially redundant VPN or a Backup IPSEC interface? Routing will be via BGP once the tunnels are up. Thanks for your time.

[rwpatterson]

Welcome to the forums. What you call it is your choice. It' s set up like any other. How you use it determines it' s ' name' .

[ashley]

OK, but by which method does the FG decide to use one VPN as primary and the secondary only when the primary is down?

[rwpatterson]

Again, it depends on how you set things up. You could use a routing protocol such as OSPF, or let the FGT decide when it detects a failure on the link.

[ashley]

Answering a post about how to set up a VPN by saying " it depends on how you set things up" is not very helpful. Thanks for your time.

[rwpatterson]

Sorry if I sound vague, but it' s not my firewall. You are the one that knows what you want/need. If you tell us, then perhaps I can be more specific with an answer. The firewall is almost limitless in the ways it can be configured, so without a pinpoint answer, I can' t get more specific than I have been. That being said, what are you trying to get out of it? By the way,

Are there any configuration examples? Is this a Partially redundant VPN or a Backup IPSEC interface?

Doesn' t seem to me like you' re asking a direct question, so sorry if I didn' t provide a direct answer. Tell us how you wish to configure the thing.