Link to home
Start Free TrialLog in
Avatar of JC Ronquillo
JC Ronquillo

asked on

Failover VPN Question Sonicwall

Hi Guys,

New here in the forums.  Just like to know if we can do an automatic failover to VPN using SonicWALL NSA 220 and a TZ 400 when our Main leased line goes down.  Also would like to know what pre requisites are needed for this.

Thanks
JC
Avatar of J Spoor
J Spoor
Flag of Netherlands image

Yes you can.

SonicWall site to site policy based VPN "routes" have a lower priority then the static routes.
So if you have a static route to the other side, make sure you set POLLING on this route to take it down if the leased line goes down.
The traffic will then automatically flow over the VPN
Hi JC,

Welcome to Experts-Exchange...glad to have you!

I'd need more info...in general the more info the better...so I can clearly understand the problem.

If you are talking about a single WAN connection failure and if that should occur then you want to fail to a VPN connection that will not work...ever! Unless you have a secondary WAN connection. You can easily achieve this if you have a secondary WAN connection by going into the S2S VPN settings under the General tab > Security Settings > IPsec Secondary Gateway Name or Address and entering the IP address of the other location. This will automate the entire VPN failover process.

If you are talking about a VPN failure in a HA mode (High Availability) then that is a different scenario entirely, however the same principle applies if there is no secondary WAN connection its futile.

Let me know if you have any more questions!
Avatar of JC Ronquillo
JC Ronquillo

ASKER

Hi Guys,

Thanks for the answers will check again and will research on how to implement this.
ASKER CERTIFIED SOLUTION
Avatar of Blue Street Tech
Blue Street Tech
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Glad I could help...thanks for the points!