Highly Available s2s VPN -with Azure active-standby gateway

Copper Contributor



I have 2 Cisco routers that I'm wanting to connect them to an Azure VPN gateway via IPSec tunnel. I'm new to Azure but from what I understood each Azure gateway has two instances that could be in active-standby mode and do an automatic failover when there is an issue with the active gateway. I have a couple of queries: in active-standby configuration, do both gateways have an IP or am I just using the active gateway public IP to build a tunnel from each of my Cisco devices? does Azure use a VIP? I'm just trying to understand how the failover works.

To prefer one tunnel over the other, from my end I can use local preferences, but for traffic from Azure to my network, how can I influence the routing using BGP?


0 Replies