topic Failover Mechanism for MEP Remote-Access VPN in SASE and Remote Access

Failover Mechanism for MEP Remote-Access VPN

CyberBreaker — Wed, 29 Apr 2020 13:58:14 GMT

Hi Experts,

I would like to ask about the failover mechanism for an MEP enabled remote-access VPN environment.

I have 3x security gateways in each 3x data centers with first-to-respond mechanism, is the failover mechanism for MEP looks like the same as 2x HA enabled gateways in which if the gateway goes down, it will failover to the other gateway automatically? Or it needs to have user intervention to connect again?

In my case, if gateway A goes down, the user should be failover to gateway B or C whichever who responds first?

Thank you.

Re: Failover Mechanism for MEP Remote-Access VPN

PhoneBoy — Thu, 30 Apr 2020 22:14:41 GMT

The client will probably need to reconnect if for jo other reason than the Office Mode IP the user will receive is going to be different for the different gateways.

Re: Failover Mechanism for MEP Remote-Access VPN

CyberBreaker — Fri, 01 May 2020 17:18:34 GMT

Hi @PhoneBoy , thanks for the reply. Based on my understanding, as long as the setup is using a an Office Mode IP, the user will not experience any disconnection once the gateway A has been shutdown? The user will be transferred from gateway A to gateway B automatically?

Thanks

Re: Failover Mechanism for MEP Remote-Access VPN

PhoneBoy — Fri, 01 May 2020 19:23:34 GMT

Failover will be disruptive precisely because of the Office Mode address.
Each gateway will assign a different IP from a different pool of addresses.
That means even if the failover happened automatically, the end user would likely have to manually reconnect for things to work.