Adding a Secondary Public Peer IP address for the GVC connection

03/26/2020 1151 12822

DESCRIPTION:
Adding a Secondary Public Peer IP address for the GVC connection

RESOLUTION:

Feature/Application:

This article covers how to configure Global VPN Client (GVC) to connect to multiple WAN Interfaces on a SonicOS Enhanced UTM device.  The gateway SonicWall firewall appliance, when it has two or more WANs, will accept incoming WAN GroupVPN traffic on any of the WANs, as long as the WAN GroupVPN Policy is enabled.  This is true no matter how the WAN Failover / Load Balancing configuration is set.  When a GVC connection is configured to use multiple peer IP addresses, it will automatically connect to the first one and then switch over to the second one.  The order can be reversed in the GVC connection, so that the inbound GVC users start with the 'Secondary WAN,' if desired.

Procedure:

1.      Configure the Global VPN client with a connection profile for the SonicWall's WAN Primary IP address

2.      Right click on the primary connection and go to Properties 

3. You will see the Properties window as below 

4. Click on the Peers tab and hit the Add button

5. Add the secondary peer IP address as shown below

6. The GVC connection window, with two Peers.

The Global VPN client will make an attempt to establish a connection with the primary peer address first, and after the maximum specified attempts it will switch over to the secondary IP address in the list shown AUTOMATICALLY.   You can also change the priority of the peer IP address using move up and move down tabs.