topic Re: FTD Route based VPN Question in Network Security

FTD Route based VPN Question

benolyndav — Thu, 13 Jun 2024 10:54:17 GMT

I am just configuring a RB VPN between our FTD and another ISP and I notice the option for backup VTI, does this allow me to add a different source VTI and a different remote Peer IP Address for resilience within the same RB VPN ?? if so how do i achieve this with the routing ??

Thanks

Re: FTD Route based VPN Question

MHM Cisco World — Thu, 13 Jun 2024 10:57:25 GMT

Yoh are correct

VTI backup on ftd allow to use two vti

One primary (which use default or static route for vti destination)

Other is vti backup (which use only static route for vti destination)

MHM

Re: FTD Route based VPN Question

benolyndav — Thu, 13 Jun 2024 11:05:51 GMT

So the RB VPN I am configuring dosent use static or default routes the subnet is added to Local protected Networks and the peer side is 0.0.0.0/0, so as you can see I am wondering how to achieve the automatic failover if no routing used.?? hope thats clear

Thanks

Re: FTD Route based VPN Question

MHM Cisco World — Thu, 13 Jun 2024 11:12:00 GMT

Local protect is use in policy based not route based VPN

MHM

Re: FTD Route based VPN Question

MHM Cisco World — Thu, 13 Jun 2024 12:23:00 GMT