Site to Site VPN when both ends have Dual WAN's

chris0320 · July 2022

I am trying to configure a Site to Site VPN between site A and site B. Both site A and site B have dual WAN interfaces. Could someone please explain the best way to make a Site to Site VPN that provides for failover if either site loses a WAN connection?

BWC · July 2022

@chris0320 if on both sides are SonicWall Appliance you can create multiple Tunnel Interfaces and create Network Routes with different Metrics to prioritize the WAN links.

This would end up in combinations like this, at least that's how I do it (at the moment).

SiteA                SiteB             Metric
X1                   X1                1
X1                   X2                2
X2                   X1                3
X2                   X2                4

In all fairness I did not tried the new approach using SD WAN, you might look into this as well.

https://www.sonicwall.com/support/knowledge-base/how-do-i-configure-sd-wan-using-vpn-numbered-tunnel-interfaces/190214085748593/

--Michael@BWC

TKWITS · July 2022

Add the second WAN IP address as the secondary gateway on the Site to Site VPN configuration screen. Tunnel interruptions to the primary gateway address will failover to the secondary gateway. Be sure to implement at least Basic Failover in Failover and Load Balancing.

http://help.sonicwall.com/help/sw/eng/9300/26/2/3/content/VPN_Settings.085.07.htm

https://www.sonicwall.com/support/knowledge-base/how-to-configure-failover-when-there-are-two-or-more-wan-interfaces/200611020940813/

Join the Conversation

Site to Site VPN when both ends have Dual WAN's

Answers