RV320 Dual IP with Gateway to Gateway VPN

[rod-denney]

Right now I have a RV320 in my main office, connected to 6 other offices, with RV3xx;s

They are configured with IP Only in the Local/Remote Group with WAN1 - Working

I need help to have a Fail Over, for the Main office, to Failover to WAN2

Do I need to setup as Dynamic IP + FQDN to make this work?

Or do I setup as IP Only VPN1 on Main - WAN1

and add second IP Only VPN2 on Main - WAN2

and then add second IP Only config at remotes, that just wont connect until the Main router Fails over to WAN2

then VPN1 would failover to VPN2?

Not finding too much info for this config out there,

and having some troubles wrapping my head around the router will just be in Waiting for Connection Status

T

[Georg Pauwen]

Hello,

whether you need 'IP Only' or 'Dynamic IP + FQDN' depends on the service you have subscribed to. If you have static IP addresses that never change, use 'IP Only'.  If you have dynamic IP address assignment (xDSL or whatever service), use the other option.

The way the failover works is that one connection is active, while the other one is in standby. You can also configure 'Load Balance'.

Have a look at the link below:

https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/smb4242-dual-wan-configuration-on-rv320-and-rv325-vpn-router-series.html

[rod-denney]

I understand the load Balance, and can Bind the services to WAN1 or WAN2 depending.

But what I'm struggling with is the VPN configs. All my remote sites

use RDP only, into Dual Term Servers, they dont even get local Desktops.

So I need to have the Fail over for the VPN configs.

Am I correct, that having

MAIN Router with VPN1 on WAN1 that would be Connected

and also having VPN2 on WAN2 - Would be Waiting for Connection 

and REMOTEs, with only one IP, would also have

VPN1 on WAN1 Connected

VPN2 on WAN1 "Waiting for Connection"

Then if MAIN fails over,

VPN1 or WAN1 - Would switch to Waiting for Connection

VPN2 on WAN2 - Would be available to Connect or Connected

Remote

VPN1 on WAN1 would be Waiting for Connection

and VPN2 on WAN1 would be Connected.

Correct? The unused VPN would be Waiting to Connect" Until needed?

or is this where Dynamic IP would come into play

and then have to setup my ISP with one name to two IP's right TTL's?

[Georg Pauwen]

Hello,

sorry for the confusion: you have RV32x dual WAN routers at the remote sites as well, but only one WAN connection (one IP address) ?

[rod-denney]

Main Office -

RV320

Dual Static IP's (About to be)

6 VPN's Configured to Remote Offices Gateway to Gateway IP Only

Remote Offices

RV320 or RV325's

Single Static IP

Configured with 1 VPN connection to Main Office Static IP

Trying to Sort, how to configure, with MAIN Office WAN1 if it fails

it Should jump to WAN2, with new Static IP

Do I need Dual VPN Conf's at the Remote Offices,

and one connection will have a Waiting for Connection Status until MAIN Office Fails over to WAN2

[rod-denney]

Did I loose you?