[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

Azure Site to Site VPN redundancy over multiple WAN links.

Posted on 2016-08-22
4
Medium Priority
?
197 Views
Last Modified: 2016-09-11
I'm trying to configure an Azure Site to Site VPN with redundancy over multiple WAN uplinks.

However, according to this:

https://social.msdn.microsoft.com/Forums/azure/en-US/b64107be-6a74-477f-9ed4-eed0d500b945/sitetosite-vpn-connecting-to-dual-wan-router-failover?forum=WAVirtualMachinesVirtualNetwork

This is not possible.

I've created a Route-Based VPN in Azure to a Cisco 2911 successfully. I am able to pass traffic, and I can add another S2S VPN to the same Virtual Gateway in Azure, but I cannot reference the same on-premise subnet. According to this azure document its just not possible still:

https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-multi-site/

Is there any way to make this work?

If not will AWS be able to do it? My goal is to provide redundant VPN links to cloud services hosting a backup of our DC/NPS.

Thanks for any input!
0
Comment
Question by:Gina Zing
  • 3
4 Comments
 
LVL 37

Accepted Solution

by:
ArneLovius earned 2000 total points (awarded by participants)
ID: 41766723
It is not possible to have multiple endpoints with the same subnet.

If you had PI address space that was advertised by more than one ISP (usually using BGP4 as a routing protocol) you could have redundancy across your internet connections while still using a single endpoint.
0
 
LVL 39

Expert Comment

by:Aaron Tomosky
ID: 41767077
Ive used sonicwalls to create a VPN tunnel with a secondary gateway IP to other sonicwalls and fortinet sand palo altos and it's worked fine with a secondary wan but I think this is a limitation with azure, not IPSec VPN tunnels as a whole.
0
 
LVL 37

Expert Comment

by:ArneLovius
ID: 41767124
@Aaron, its completely an Azure restriction
0
 
LVL 37

Expert Comment

by:ArneLovius
ID: 41793214
complete and concise
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, WatchGuard's Director of Security Strategy and Research Teri Radichel, takes a look at insider threats, the risk they can pose to your organization, and the best ways to defend against them.
Scripts are great for performing batch jobs against users, however sometimes the GUI is all you need.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

590 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question