Community discussions

 
Konior21
just joined
Topic Author
Posts: 4
Joined: Fri Dec 26, 2014 4:55 pm

Dual WAN VPN with failover

Fri Dec 26, 2014 5:06 pm

Hello, new Mikrotik user here, I have previous experience with Sonicwall and a little Cisco/ASA. I have the basics configured on my new Mikrotiks for my company, although they are not in production yet. I have three that need to all go live as close together as possible, including one that is overseas that I must configure remotely. The two US sites each have two WAN connections, the overseas site only has one. I need to setup a VPN between all 3 locations with WAN failover at the US sites, that will keep the VPN connection up if any US WAN connection fails. I do not care about load balancing.

I have been watching YouTube videos and searching the forums, but I have not been able to find exactly what I need. Can anyone point me in the right direction? Thanks!
 
Konior21
just joined
Topic Author
Posts: 4
Joined: Fri Dec 26, 2014 4:55 pm

Re: Dual WAN VPN with failover

Tue Dec 30, 2014 4:37 pm

Bump. This is a pretty standard setup. Can anyone help with this?
 
Konior21
just joined
Topic Author
Posts: 4
Joined: Fri Dec 26, 2014 4:55 pm

Re: Dual WAN VPN with failover

Wed Dec 31, 2014 4:54 pm

Please disregard as I am returning these firewalls and buying SonicWalls.
 
marting
Member Candidate
Member Candidate
Posts: 160
Joined: Thu Aug 21, 2014 2:07 pm

Re: Dual WAN VPN with failover

Fri Jan 09, 2015 12:04 pm

Hi,
I need to build a similar setup. Does anybody have a hint?
Regards
Martin
 
eternal0
newbie
Posts: 49
Joined: Fri Jun 20, 2014 5:56 pm

Re: Dual WAN VPN with failover

Fri Jan 09, 2015 2:39 pm

1.Use SSTP/OVPN to connect to each IP. You need to configure Mangle Rule and Routing Table to make the network flow using proper WAN connection.
2.Set up EoIP tunnel for each SSTP/OVPN.
3.Set up bonding for each pair of EoIP tunnel. In your case you need 3 bonding.
4.Enjoy!
 
marting
Member Candidate
Member Candidate
Posts: 160
Joined: Thu Aug 21, 2014 2:07 pm

Re: Dual WAN VPN with failover

Wed Jan 21, 2015 4:03 pm

Hi eteranl,
thank you for sharing this solution. As I have read EoIP suffers performance, is there a better alternative? Would this work?
1. SSTP/OVPN to connect each WAN to each pper
2. MPLS/VPLS over VPN tunnel
 
eternal0
newbie
Posts: 49
Joined: Fri Jun 20, 2014 5:56 pm

Re: Dual WAN VPN with failover

Thu Jan 22, 2015 5:16 pm

Hi eteranl,
thank you for sharing this solution. As I have read EoIP suffers performance, is there a better alternative? Would this work?
1. SSTP/OVPN to connect each WAN to each pper
2. MPLS/VPLS over VPN tunnel
If you can accept tcp connection reset on failover, just use any Tunnel is OK. EoIP and bonding is not necessary.
I think SSTP/OVPN have a serious impact on performance, not EoIP. GRE(IPIP/EoIP/PPTP) is much faster than TCP(SSTP/OVPN).
 
marting
Member Candidate
Member Candidate
Posts: 160
Joined: Thu Aug 21, 2014 2:07 pm

Re: Dual WAN VPN with failover

Thu Jan 22, 2015 5:21 pm

But you suggest using SSTP/OVPN as point 1 in your solution. Do I misunderstand?
 
eternal0
newbie
Posts: 49
Joined: Fri Jun 20, 2014 5:56 pm

Re: Dual WAN VPN with failover

Fri Jan 23, 2015 2:44 am

But you suggest using SSTP/OVPN as point 1 in your solution. Do I misunderstand?
I suggest it for security(RSA4096+SHA512+AES256).
If you need high performance, use IPIP/PPTP instead. Of course, you still need to configure Mangle Rule and Routing Table.

Who is online

Users browsing this forum: No registered users and 36 guests