question

JohnHust-6865 avatar image
0 Votes"
JohnHust-6865 asked JohnHust-6865 commented

Virtual network gateway- Active/active

Is there any impact to an existing VPN when active /active is enabled?

azure-vpn-gateway
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

AndriyBilous avatar image
1 Vote"
AndriyBilous answered JohnHust-6865 commented

Hello @JohnHust-6865

There is no impact but in case of a planned or unplanned maintenance event you have to make sure that the routes are removed or withdrawn automatically from your on-prem VPN device and the traffic is switched over to the other active IPsec tunnel. This will not be done by Azure.

Virtual network gateway in Active/active mode establishes multiple parallel connections between your your on-premises VPN device and both instances of the gateway VMs.
83344-image.png
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable

In this configuration, each Azure gateway instance will have a unique public IP address, and each will establish an IPsec/IKE S2S VPN tunnel to your on-premises VPN device specified in your local network gateway and connection. Both VPN tunnels are actually part of the same connection. You will still need to configure your on-premises VPN device to accept or establish two S2S VPN tunnels to those two Azure VPN gateway public IP addresses.

The traffic from your Azure virtual network to your on-premises network will be routed through both tunnels simultaneously, even if your on-premises VPN device may favor one tunnel over the other.



image.png (32.3 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

thanks for the update from what I posted is that the same as84084-image.png


0 Votes 0 ·
image.png (18.9 KiB)