| Re: Multiple Internet Links - Failover [message #120631 is a reply to message #120069] |
Sun, 12 April 2015 15:08   |
UnifiedTechs-Brian
Messages: 159
Registered: March 2011
Location: Vero Beach, FL
|
|
|
|
menace wrote on Tue, 17 March 2015 03:07ksnyder (KERIO) wrote on Mon, 16 March 2015 23:56Use a traffic rule to force traffic on the primary link. Below that rule, add an identical rule to force traffic through the backup link.
For example, rules for VPN-clients connect to the Kerio Control as you said. One for Primary Link and one for Backup Link.
While the Primary Link works users can easily connect to the server via Backup Link's IP according to the second rule.
The problem is you should not be connecting the client to VPN directly with IP addresses. This whole situation can be fixed by using DNS and the tools already built into Control:
Use the failover built into Control VPN client already. "Multiple endpoints can be defined to configure VPN failover in case the Kerio Control VPN server is load balancing with multiple Internet links. To separate entries, use a semicolon (for example, primary.example.com;secondary.example.com)". http://kb.kerio.com/product/kerio-control/vpn/configuring-ke rio-control-vpn-client-1303.html.
To force users to go back to your primary link when it returns you need to hit the advanced button under "Internet Connectivity" and make sure the box "Force reconnect of all VPN tunnels when the primary line is used again" This will cause the VPN tunnels to drop and when they reconnect they will go back to the primary link barring any other issues.
(Alternate method with 3rd party service: Use a DNS service with failover such as EasyDNS. Users always connect to VPN.domain.com. The DNS host monitors if the address is up and if it goes down it fails over the record to the second IP, when the first IP returns the DNS record goes back to normal.)
- Brian
Kerio Preferred Partner, Reseller & Hosting Provider
Unified Technology Solutions
[Updated on: Sun, 12 April 2015 15:17] Report message to a moderator |
|
|
|
Members
Search
Help
Register
Login
Home
