Solved

Azure Site to Site VPN redundancy over multiple WAN links.

Posted on 2016-08-22
4
35 Views
Last Modified: 2016-09-11
I'm trying to configure an Azure Site to Site VPN with redundancy over multiple WAN uplinks.

However, according to this:

https://social.msdn.microsoft.com/Forums/azure/en-US/b64107be-6a74-477f-9ed4-eed0d500b945/sitetosite-vpn-connecting-to-dual-wan-router-failover?forum=WAVirtualMachinesVirtualNetwork

This is not possible.

I've created a Route-Based VPN in Azure to a Cisco 2911 successfully. I am able to pass traffic, and I can add another S2S VPN to the same Virtual Gateway in Azure, but I cannot reference the same on-premise subnet. According to this azure document its just not possible still:

https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-multi-site/

Is there any way to make this work?

If not will AWS be able to do it? My goal is to provide redundant VPN links to cloud services hosting a backup of our DC/NPS.

Thanks for any input!
0
Comment
Question by:Gina Zing
  • 3
4 Comments
 
LVL 37

Accepted Solution

by:
ArneLovius earned 500 total points (awarded by participants)
ID: 41766723
It is not possible to have multiple endpoints with the same subnet.

If you had PI address space that was advertised by more than one ISP (usually using BGP4 as a routing protocol) you could have redundancy across your internet connections while still using a single endpoint.
0
 
LVL 38

Expert Comment

by:Aaron Tomosky
ID: 41767077
Ive used sonicwalls to create a VPN tunnel with a secondary gateway IP to other sonicwalls and fortinet sand palo altos and it's worked fine with a secondary wan but I think this is a limitation with azure, not IPSec VPN tunnels as a whole.
0
 
LVL 37

Expert Comment

by:ArneLovius
ID: 41767124
@Aaron, its completely an Azure restriction
0
 
LVL 37

Expert Comment

by:ArneLovius
ID: 41793214
complete and concise
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
This article runs through the process of deploying a single EXE application selectively to a group of user.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now