active-standby VPN

Question

In active-standby mode, one IPsec tunnel is active and the other tunnel is in standby. In this setup, traffic flows through the active tunnel, and if some issue happens with this tunnel, the traffic switches over to the standby tunnel
should i set standby tunnel? or just 1 tunnel. IF i should to setup standby tunnel, it is neccessary to setup another vpn gateway on-premises devices?

Answer 1

Hi @rinto nurtantho

I didn't quite understand the question:
"should i configure standby tunnel, need to configure another vpn gateway on-premises"

Every Azure VPN gateway consists of two instances in an active-standby configuration. For any planned maintenance or unplanned disruption that happens to the active instance, the standby instance would take over (failover) automatically, and resume the S2S VPN or VNet-to-VNet connections

Active-active gateways have two Gateway IP configurations and two public IP addresses and there is no additional cost to use active-active
reference: https://learn.microsoft.com/en-us/azure/vpn-gateway/active-active-portal#change-active-active-to-active-standby

if you need Dual-redundancy you should provision 4 tunnels, 2 each side, and use BGP

reference: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable#dual-redundancy-active-active-vpn-gateways-for-both-azure-and-on-premises-networks

Get in touch if you need more help with this issue.

--please don't forget to "Accept the answer" if the reply is helpful--