Accessing Redundant VPN Gateways

The Global VPN Client supports redundant VPN gateways by manually adding the peer on the Peers page of the VPN connection Properties window. The Global VPN Client adds automatic support for redundant VPN gateways if the IPsec gateway’s domain name resolves to multiple IP addresses. For example, if gateway.yourcompany.com resolves to 67.115.118.7, 67.115.118.8, and 67.115.118.9, Global VPN Client cycles through these resolved IP addresses until it finds a gateway that responds, allowing multiple IP addresses to be used as failover gateways. If all the resolved IP addresses fail to respond, Global VPN Client switches to the next peer, if another peer is specified in the Peers page of the VPN connection Properties dialog. For more information, see Connection Properties Peers Settings.

When configuring redundant VPN gateways, the Group VPN policy attributes (such as pre‐shared keys and the attributes on the Peer Information page) must be the same for every gateway if the gateway’s FQDN resolves to multiple IP addresses. However, if you set up multiple peers on the Peers page, then each peer gateway can have its own settings.