Hi @Handian Sudianto ,
Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you would like to have redundancy between VPN sites.
This is possible with BGP.
In the LNGs, you should only specify the IP Address of the Local Sites and leave the Address space empty.
The BGP will automatically update the traffic selectors, i.e., address ranges between Azure and OnPrem site.
- When a particular site goes down, let's say site A.
- The VPN connection between VPN Gateway and site A will drop.
- The connection between VPN Gateway and site B will still be intact.
- Now, the site B should advertise the routes to site A via BGP to Azure VPN gateway.
- Then, Azure will forward both site A traffic and site B traffic to site B (as it learns the route dynamically from BGP).
- This configuration should be made from the OnPrem devices, to add or remove the routes from BGP.
There is a more dynamic way to achieve this, without manually having to update BGP whenever a site goes down
- You can use BGP path prepending.
- Azure VPN gateway honors BGP path prepending. Visit this page
- Your requirement is somewhat similar to Suboptimal routing from Microsoft to customer
- The above document is written for ExpressRoute MS Peering, but you can take reference from here for your requirement.
Hope this helps.
Thanks,
Kapil
----------------------------------------------------------------------------------------------------------------
Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.