I'd like to hear suggestions and thoughts about how to proceede with the following:
A customer has a site with multi-homed internet acces (two different ISP and public IP's).
The customer want a site to site IPSec VPN tunnel to our datacenter (we have a FortiGate), leveraging both public peering IP they have for failover scenario.
Primary will only one peer be used for active traffic, but if this should fail, the sec. should take over.
Should I create two different site-to-site VPN connection to the customer. The phase 2 SA's will contain the same local and remote networks.
And in our Fortigate create 2 different routes, one using the primary VPN logical interface and lower metric and static route for sec. VPN logical interface and a hight metric?
Is it possible to create one VPN tunnel, with two peer IPs to use?
Looking forward to hear from you