FVS336gv3 VPN Failover with two ISPs

[Vio]

Dear all,

we got a customer with two sites and each site has a FVS336gv3.

Site A and Site B are connected via IPSec VPN (Gateway).

On Site A we only have one internet connection.

On Site B we got two internet connections from different providers. WAN1 is the faster connection and it's configured to rollover to WAN2.

What we are trying to do is, if the connection rolls over two WAN2 the VPN should also be switched to WAN2.

We tried with FQDN on Site B, but we can't get it to work. Maybe you could help us with this?

BR,
Vera

[DaneA]

Hi Vio,

Welcome to the community! 🙂 

Kindly answer the questions below:

a. Were you able to check the box that says "Enable RollOver?" via the VPN Wizard on the FVS336Gv3 on site B?  Check the image below. 

b. To isolate the problem, try not to use or disable WAN 1 port on the FVS336Gv3 on site B.  Then, just enable WAN 2 port  on the FVS336Gv3 on site B for internet access and configure box-to-box VPN with the FVS336Gv3 on site A using the VPN Wizard.  Are you able to establish a VPN tunnel? 

Regards,

DaneA

NETGEAR Community Team

[DaneA]

Hi Vio,

I just want to follow-up on this.  

Regards,

DaneA

NETGEAR Community Team

[DaneA]

Hi Vio,

We’d greatly appreciate hearing your feedback letting us know if the information I’ve provided has helped resolve your concern or if you need further assistance.  

If ever your concern has been resolved, I encourage you to mark the appropriate reply as the “Accepted Solution” so others can be confident in benefiting from the solution. The NETGEAR Community looks forward to hearing from you and being a helpful resource in the future!  

Regards,

DaneA

NETGEAR Community Team

[Vio]

I'm sorry to not respond until now. I was on vacation.

I will try your solution and come back to you.

[DaneA]

Hi Vio,

I just want to follow on this.  Any updates?

Regards,

DaneA

NETGEAR Community Team

[Vio]

On Site B I got this configuration:

We tried to simulate it and unplugged WAN1. It rolled over to WAN2 but the VPN is not established.

I think the problem is with Site A, because I'm coming with another IP from Site B.

[DaneA]

Hi Vio,

Kindly try the following:

1. On Site A, set the VPN end point to the DynDNS of Site B.

2. On Site B: 

        a. set the VPN to rollover

        b. configure the WAN to rollover

        c. DynDNS should be configured for both WAN

Let us know the results. 

Regards,

DaneA

NETGEAR Community Team

[DaneA]

Hi Vio,

Just want to follow-up on this.  Any updates? 

Regards,

DaneA

NETGEAR Community Team