Sophos Firewall

Discussions Multiple ipsec VPN as backup for MPLS

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 7 replies
Subscribers 38 subscribers
Views 2734 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Multiple ipsec VPN as backup for MPLS

MMASLOUH over 4 years ago

Hi

i have MPLS link as a wan interface (its connect me to more than 20 branches )

i have used the following article to configure IPSEC VPN as a backup for MPLS

https://community.sophos.com/kb/en-us/123323#VPN%20Link%20as%20a%20Backup%20for%20MPLS%20Link

but i can only create 1 IPSEC as a backup

can i add multiple lines?

like

system link_failover add primarylink Port2 backuplink vpn tunnel Branch1 monitor PING host 10.16.1.1

system link_failover add primarylink Port2 backuplink vpn tunnel Branch2 monitor PING host 10.16.2.1

system link_failover add primarylink Port2 backuplink vpn tunnel Branch3 monitor PING host 10.16.3.1

Firmware Version: 17.0.8 ( i can't upgrade the firmware for the moment )

This thread was automatically locked due to age.

Parents

0 FormerMember over 4 years ago

Hi MMASLOUH,

I think you should be able to add multiple IPsec VPN connection as a backup for your MPLS link. When you say you could only add one as a backup, are you getting any error or issues?

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 MMASLOUH over 4 years ago in reply to FormerMember

Hi MMASLOUH,

I think you should be able to add multiple IPsec VPN connection as a backup for your MPLS link. When you say you could only add one as a backup, are you getting any error or issues?

Thanks,

yes i got the error below.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to MMASLOUH

MMASLOUH,

are you sure the port and the ipsec tunnel are correct?

Is the ip a remote host ip?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 4 years ago in reply to MMASLOUH

MMASLOUH,

are you sure the port and the ipsec tunnel are correct?

Is the ip a remote host ip?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 MMASLOUH over 4 years ago in reply to lferrara

MMASLOUH,

are you sure the port and the ipsec tunnel are correct?

Is the ip a remote host ip?

Thanks

Hi,

Yes, i tried to delete the first failover link and everything work.

but when im trying to add another failover link it show me the failed message.

check the screen below.
Cancel
Vote Up 0 Vote Down

Cancel
0 MMASLOUH over 3 years ago in reply to MMASLOUH

I still get the same problem even with the last firmware.
Cancel
Vote Up 0 Vote Down

Cancel