Multiple on-premises VPN devices

How about this:

1. Create Two VPN Connections

• In Azure, create two VPN connections from your Virtual Network Gateway:
• One to the Primary on-prem VPN device
• One to the Secondary on-prem VPN device

2. Configure Static Routes

• Use Local Network Gateways in Azure to define the IP prefixes for your on-prem network.
• Assign static routes to each connection:
• Primary connection: assign the route with lower metric (higher priority)
• Secondary connection: assign the same route with higher metric

This way, Azure will prefer the primary tunnel unless it goes down.

3. Enable Dead Peer Detection (DPD)

• Ensure DPD is enabled on both sides so Azure can detect when the primary tunnel is down and switch to the secondary.

4. Monitor and Alert

• Use Azure Network Watcher or Log Analytics to monitor tunnel health.
• Set up alerts to notify you if the primary tunnel fails.