Using SSLVPN and IpSec as a Single Connection with automatic fallback to simply enduser handling?

It will be nice to combine SSLVPN and IpSec to one visible connection. If you're in China and SSLVPN doesn't work stable fallback to IpSec should take place, if you're in an hotel and IpSec is not possible SSLVPN should be tried. There should be a possibility to define one as primary and another connection as secondary. 

As already in another post is written down, a single provision file should be possible with the ability of an automated rollout.

Good Job, i like it!

Ralf

Parents Reply
  • This could be struggling as SSLVPN is independent of the xg-wan interface, means xg is accepting on any WANport ssl-vpn connections.

    IPsec is dedicate to one single interface without any option to add additional interfaces (just only one profile can be configured).
    That makes WAN connection backup impossible for IPsec.

    Without fundamental changes on xg there won't be no way to do this if you run multiple wan interfaces.

Children