Solved

Azure Site to Site VPN redundancy over multiple WAN links.

Posted on 2016-08-22
4
31 Views
Last Modified: 2016-09-11
I'm trying to configure an Azure Site to Site VPN with redundancy over multiple WAN uplinks.

However, according to this:

https://social.msdn.microsoft.com/Forums/azure/en-US/b64107be-6a74-477f-9ed4-eed0d500b945/sitetosite-vpn-connecting-to-dual-wan-router-failover?forum=WAVirtualMachinesVirtualNetwork

This is not possible.

I've created a Route-Based VPN in Azure to a Cisco 2911 successfully. I am able to pass traffic, and I can add another S2S VPN to the same Virtual Gateway in Azure, but I cannot reference the same on-premise subnet. According to this azure document its just not possible still:

https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-multi-site/

Is there any way to make this work?

If not will AWS be able to do it? My goal is to provide redundant VPN links to cloud services hosting a backup of our DC/NPS.

Thanks for any input!
0
Comment
Question by:Gina Zing
  • 3
4 Comments
 
LVL 36

Accepted Solution

by:
ArneLovius earned 500 total points (awarded by participants)
ID: 41766723
It is not possible to have multiple endpoints with the same subnet.

If you had PI address space that was advertised by more than one ISP (usually using BGP4 as a routing protocol) you could have redundancy across your internet connections while still using a single endpoint.
0
 
LVL 38

Expert Comment

by:Aaron Tomosky
ID: 41767077
Ive used sonicwalls to create a VPN tunnel with a secondary gateway IP to other sonicwalls and fortinet sand palo altos and it's worked fine with a secondary wan but I think this is a limitation with azure, not IPSec VPN tunnels as a whole.
0
 
LVL 36

Expert Comment

by:ArneLovius
ID: 41767124
@Aaron, its completely an Azure restriction
0
 
LVL 36

Expert Comment

by:ArneLovius
ID: 41793214
complete and concise
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Issue with server 2012 R2 and access to folders 20 38
Script to display new/disabled AD accounts 3 22
active directory 5 46
Distribution groups exchange 2013 6 43
This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

948 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now