VPN Trunks offer a way of creating multiple site-to-site VPN tunnels between the same two subnet, the advantage of doing this is that the VPN trunk can provide both load balancing and redundancy.
If there are multiple WAN connections available then one VPN tunnel could be created on each WAN to maximise the bandwidth available for the VPN trunk. Even if one of the sites has a single WAN link, a one-to-many VPN trunk can be created to take advantage of the multiple connections at the multi-wan site.
The Vigor 3900 offers Load Balance and Failover modes. This guide covers the setup of a load balanced VPN trunk between two Vigor 3900 routers, with each router having two WAN interfaces.
Consider a scenario as per the above image, Vigor 3900s on Site A and Site B have two WAN connections and there are two IPSec VPN links through each WAN port.
Site A Vigor 3900
LAN : 192.168.1.0/24
WAN1 : 80.0.0.1
WAN2 : 90.0.0.1
Site B Vigor3900
LAN : 192.168.2.0/24
WAN1 : 80.0.0.2
WAN3 : 90.0.0.2
Go to [VPN and Remote Access] - > [VPN Profiles] menu. Here add two VPN profiles for WAN1 and WAN2 each.
VPN Profile 1 (WAN1)
[GRE IP Addresses can be any IP address of your choice. Just make sure that they do not conflict with any IP subnet routes in the Routing Table.]
VPN Profile 2 (WAN2)
Go to [VPN and Remote Access] -> [VPN Trunk Management] menu. Here click on Load Balance tab. Here add a Load Balance Pool and select appropriate VPN profiles.
Under Load Balance Rule tab, add a rule as shown in below screenshot.
VPN Profile 1 (WAN1)
VPN Profile 2 (WAN2)
VPN Trunk Management
How do you rate this article?