SRX

Expand all | Collapse all

ike/ipsec tunnel with fallback interface

Jump to Best Answer
  • 1.  ike/ipsec tunnel with fallback interface

    Posted 02-03-2020 03:27

    Good day,

     

    we have a main office & multiple sattelite locations.

    the sattelite office have most of the times a fixed connection and sometimes a LTE connection.

    when they need to switch from/to LTE we need to login and change the external interface in the IKE gateway.

    However when this happens unplanned we need to drive to the location and change it.

    is there any change to allow 2 external interfaces? so the tunnel will automatic switch to the default connection.
    it is no problem to do a fysical change like unplug the cable to the broadband modem.

     

    Kind regards

    Mark



  • 2.  RE: ike/ipsec tunnel with fallback interface
    Best Answer

     
    Posted 02-03-2020 04:09

    Hello Mark,

     

    You can configure primary/backup VPN.

     

    https://kb.juniper.net/InfoCenter/index?page=content&id=KB29227&actp=METADATA

     

    Please follow below KB to understand it better and let me know your queries.

     

    Thanks,

    Shina



  • 3.  RE: ike/ipsec tunnel with fallback interface

    Posted 02-06-2020 00:44

    Good day Shina,

     

    So the solution is to make 2 vpn connections. one for both interfaces.

    it was not the expected solution but it will be an acceptable one.

    Thanks