VPN IP SEC FAIL OVER

Hi gerardo josic rodriguez paredes 

On Site A you can create an Availability Group under Definitions & Users > Network Definition > Availability Group and add the IP addresses of Site B and C (in the order you want the VPN to try). You then add that Availability Group under "Gateway" in the Remote Gateway configuration.

Are Sites B and C two different sites or are they 2 different ISP's from the same site?

If the latter, on that Site you will need to select Uplink Interfaces for the local interface in the IPsec Connections configuration. Please see the following KBA: How to configure IPsec Site-to-Site VPN with multipath uplink on a Sophos UTM

Hope this helps.

Karlos

Karlos, that's the "old" new way to do this.  The "new" new way is with an Interface Group: Auto-Failover IPsec VPN Connections.

And, since V9 brought us the ability to bind an IPsec Connection to an Interface, it's now possible to have two active tunnels and instant failover using Static Routes.  The best description I know of this is in German, but Sophos UTM multiple S2S IPsec VPN mit Failover – Tutorial (DE) has pictures of all settings in English.

Gerardo, if Karlos and I misunderstood your situation, please supply a simple, stick diagram of what you need.

Cheers - Bob

This is what I was looking for.

https://community.sophos.com/products/unified-threat-management/w/utm-wiki/3/sophos-utm-multiple-s2s-ipsec-vpn-mit-failover-tutorial-de

Thank you very much !!!