topic Re: FTD dual ISP and Site2Site VPN in Network Security

FTD dual ISP and Site2Site VPN

AveLor46429 — Tue, 14 Jul 2020 08:51:21 GMT

Hello.

I have some FTD 2110, managed by FMC. I make site2site ipsec (hub and spoke topology).

So on spokes I start to connect secondary ISP for failover. How I can make failover site2site?

for extranet type of spoke I could set peer IP and backup IP. But how I can achive this on managed FTDs?

Thank you.

FMC and FTD has version 6.6

AKK — Wed, 15 Jul 2020 18:21:01 GMT

Hi,

Please share your connectivity diagram with Dummy IP to check the solution.

Regards,

AKK

AveLor46429 — Wed, 15 Jul 2020 19:05:41 GMT

Thank for your answer!

If I understood you correctly, diagram seems something like that:

each FTD at HA mode, and braches more than two.

AveLor46429 — Wed, 22 Jul 2020 10:43:25 GMT

So, I try to make two hub&spoke topology, with hub answer-only and spokes originate (routes to failover ISP is tracked) but it does not seem to work.

May be there is another way or may be some pitfails?..

edh@oneonta.com — Mon, 09 Jan 2023 18:39:46 GMT

Has anyone figured this out? I am in the same situation and haven't been able to create this topology in a way that works.

Marius Gunnerud — Mon, 09 Jan 2023 20:42:23 GMT

Look into using routed site to site VPN (VTI). This way you can use dynamic routing to identify the preferred path and backup path.

MHM Cisco World — Mon, 09 Jan 2023 20:45:55 GMT

make new post and ask your Q