Solved

Azure Site to Site VPN redundancy over multiple WAN links.

Posted on 2016-08-22
4
89 Views
Last Modified: 2016-09-11
I'm trying to configure an Azure Site to Site VPN with redundancy over multiple WAN uplinks.

However, according to this:

https://social.msdn.microsoft.com/Forums/azure/en-US/b64107be-6a74-477f-9ed4-eed0d500b945/sitetosite-vpn-connecting-to-dual-wan-router-failover?forum=WAVirtualMachinesVirtualNetwork

This is not possible.

I've created a Route-Based VPN in Azure to a Cisco 2911 successfully. I am able to pass traffic, and I can add another S2S VPN to the same Virtual Gateway in Azure, but I cannot reference the same on-premise subnet. According to this azure document its just not possible still:

https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-multi-site/

Is there any way to make this work?

If not will AWS be able to do it? My goal is to provide redundant VPN links to cloud services hosting a backup of our DC/NPS.

Thanks for any input!
0
Comment
Question by:Gina Zing
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 37

Accepted Solution

by:
ArneLovius earned 500 total points (awarded by participants)
ID: 41766723
It is not possible to have multiple endpoints with the same subnet.

If you had PI address space that was advertised by more than one ISP (usually using BGP4 as a routing protocol) you could have redundancy across your internet connections while still using a single endpoint.
0
 
LVL 39

Expert Comment

by:Aaron Tomosky
ID: 41767077
Ive used sonicwalls to create a VPN tunnel with a secondary gateway IP to other sonicwalls and fortinet sand palo altos and it's worked fine with a secondary wan but I think this is a limitation with azure, not IPSec VPN tunnels as a whole.
0
 
LVL 37

Expert Comment

by:ArneLovius
ID: 41767124
@Aaron, its completely an Azure restriction
0
 
LVL 37

Expert Comment

by:ArneLovius
ID: 41793214
complete and concise
0

Featured Post

[Webinar] Learn How Hackers Steal Your Credentials

Do You Know How Hackers Steal Your Credentials? Join us and Skyport Systems to learn how hackers steal your credentials and why Active Directory must be secure to stop them. Thursday, July 13, 2017 10:00 A.M. PDT

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The following article is comprised of the pearls we have garnered deploying virtualization solutions since Virtual Server 2005 and subsequent 2008 RTM+ Hyper-V in standalone and clustered environments.
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question