Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 40 subscribers
  • Views 3124 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SD-RED, how to setup primary and backup sites

adnan khan

Dear Experts,

Can someone highlight if below scenario is possible with XG and SD-RED

 

1) 1 Primary site with 2 Internet links

2) 1 DR site with 2 internet links

3 ) 1 Branch site with 2 (or 1 ) internet links

Physical connections on RED will be 2 as mentioned above. But can i configure it in such a way that RED can connect to DR site if either the primary site goes down (XG is down) or if the links to XG are down?



This thread was automatically locked due to age.
Parents
  • 0

    Hi  

    You can do this provided that the XG in primary site and XG in DR site are in HA.

    This means that you would need a high speed link with a round trip between the 2 sites not exceeding 7 seconds.  

    The branch site would connect to the primary site XG (which is in HA with DR site) via a RED device or another XG setup for RED tunneling.

    In your HA configuration you would then set it to monitor both internet interfaces and internal interfaces.

    Thanks!

    KingChris
    Community Support | Sophos Support
    Sophos Support Videos | Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts |
    If a post solves your question use the 'This helped me' link

Reply
  • 0

    Hi  

    You can do this provided that the XG in primary site and XG in DR site are in HA.

    This means that you would need a high speed link with a round trip between the 2 sites not exceeding 7 seconds.  

    The branch site would connect to the primary site XG (which is in HA with DR site) via a RED device or another XG setup for RED tunneling.

    In your HA configuration you would then set it to monitor both internet interfaces and internal interfaces.

    Thanks!

    KingChris
    Community Support | Sophos Support
    Sophos Support Videos | Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts |
    If a post solves your question use the 'This helped me' link

Children
Unfiltered HTML