active-standby VPN

rinto nurtantho 6 Reputation points
2022-06-22T07:19:40.043+00:00

In active-standby mode, one IPsec tunnel is active and the other tunnel is in standby. In this setup, traffic flows through the active tunnel, and if some issue happens with this tunnel, the traffic switches over to the standby tunnel
should i set standby tunnel? or just 1 tunnel. IF i should to setup standby tunnel, it is neccessary to setup another vpn gateway on-premises devices?

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,311 questions
{count} vote

1 answer

Sort by: Most helpful
  1. Jackson Martins 9,131 Reputation points MVP
    2022-06-22T09:28:35.66+00:00

    Hi @rinto nurtantho

    I didn't quite understand the question:
    "should i configure standby tunnel, need to configure another vpn gateway on-premises"

    Every Azure VPN gateway consists of two instances in an active-standby configuration. For any planned maintenance or unplanned disruption that happens to the active instance, the standby instance would take over (failover) automatically, and resume the S2S VPN or VNet-to-VNet connections

    Active-active gateways have two Gateway IP configurations and two public IP addresses and there is no additional cost to use active-active
    reference: https://learn.microsoft.com/en-us/azure/vpn-gateway/active-active-portal#change-active-active-to-active-standby

    if you need Dual-redundancy you should provision 4 tunnels, 2 each side, and use BGP

    reference: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable#dual-redundancy-active-active-vpn-gateways-for-both-azure-and-on-premises-networks

    Get in touch if you need more help with this issue.

    --please don't forget to "Accept the answer" if the reply is helpful--

    1 person found this answer helpful.
    0 comments No comments