Tunnel-Groups

Some VPN scenarios require that a given group of VPN tunnels of a device terminates on, or establishes to, a common VPN gateway. This is necessary, for example, where VPN tunnels are configured on a cluster of load balancers and VPN tunnels use the alternative gateway list and maybe even different paths or outbound Internet connections (DSL, LTE, Ethernet) to reach the destination.

A VPN load balancer requires that the various VPN tunnels always terminate on a common VPN gateway.

IKEv2 tunnel groups is a feature that ensures that all VPN tunnels in a group always terminate on a common VPN gateway. The first VPN tunnel to be established in a group determines the common VPN gateway, and the VPN remote gateways for all of the other members of the tunnel group are transferred to this destination. Usually, this is the VPN tunnel that is established the fastest. The selection of a gateway is only performed again if all tunnel group members are unable to reach the gateway.

The function of the IKEv2 tunnel groups can basically be used independently of a load balancer.

Note: Tunnel groups are not supported in conjunction with IKEv2 Redirect and the IKEv2 Redirect Load Balancer.
SNMP ID:
2.19.36.13 
Console path:
Setup > VPN > IKEv2

www.lancom-systems.com

LANCOM Systems GmbH | A Rohde & Schwarz Company | Adenauerstr. 20/B2 | 52146 Wuerselen | Germany | E‑Mail info@lancom.de

LANCOM Logo