topic Re: WAN link Redundancy in VSX in Firewall and Security Management

WAN link Redundancy in VSX

Trinickrs — Thu, 17 Mar 2022 14:08:45 GMT

A customer has a R77.30 VSX environment with one of its virtual system connected to a VPN via WAN link to a remote site.

The customer would like to have a Redundant WAN link connected. However with VSX limitations ISP Redundancy and VTI are not supported. Do you know of any other VSX solution of connecting a 2nd WAN link to the environment?

Note: The customer's environment will be upgraded to a higher version soon, however the VSX limitations remain.

Re: WAN link Redundancy in VSX

PhoneBoy — Thu, 17 Mar 2022 14:40:50 GMT

Once you upgrade to a newer release, you should have options with PBR and/or route monitoring.

Re: WAN link Redundancy in VSX

Trinickrs — Thu, 17 Mar 2022 14:59:30 GMT

Thanks for the feedback PhoneBoy.

However, I'm was looking for an immediate solution to have the redundant WAN link in the environment. Since the customer can't give any maintenance window at this time.

Re: WAN link Redundancy in VSX

Chris_Atkinson — Thu, 17 Mar 2022 15:39:47 GMT

What is the current physical topology and have you explored solutions external to the cluster itself?

R77.30 is long out of support and a risk, some would argue this is worse than the proposed controlled downtime.

VTI is supported with VSX on R81 and above.

Re: WAN link Redundancy in VSX

PhoneBoy — Thu, 17 Mar 2022 18:46:39 GMT

As far as I know, there isn't really a way to achieve this under R77.30.
Your best bet is to upgrade to a supported version where other options exist.