High availability

Multiple gateways linked to the same remote site can be declared to safeguard against the failure of one of your devices.

Active-active mode

This mode is supported with static or dynamic routing.

In this diagram, both gateways on customer remote site 1 announce 10.0.0.0/24 subnet via BGP.

IPsec gateway on WALLIX One PAM accepts both routes and put them in the routing table:

Prefix	Next-hop
10.0.0.0/24	- tunnel1 - tunnel2

Active-standby mode

This mode is only supported with dynamic routing.

In this diagram, both gateways on customer remote site 1 announce 10.0.0.0/24 subnet via BGP.
As gateway_1 uses MED with lower value than gateway_2, its announcement takes priority.

IPsec gateway on WALLIX One PAM puts only routes from gateway1 (If the routes received from gateway_2 have the same length) in the routing table:

Prefix	Next-hop
10.0.0.0/24	- tunnel1

The second tunnel is put in standby mode. If tunnel 1 fails for any reasons, tunnel 2 is used to join network 10.0.0.0/24.