Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » VPN Failover

Messages: 13
Karma: 0
Send a private message to this user
I have a customer with two sites with a Kerio Control server at each site. Each site has 2 WAN connections and are successfully using load balancing independently.

Is it possible to setup VPN failover between the sites so if one WAN connection goes down a VPN connection is established over the other line. Or is it possible to do VPN trunking where both lines are used simultaneously with redundancy?


ICT and Me

Messages: 940

Karma: 53
Send a private message to this user
No, this can't be done. The certificate is already used for one connection.
But what can work is following setting within your DNS (public).
{domainname} 1e Public IP A-record
{domainname} 2e Public IP A-record
vpn <_at_> (wildcard) CNAME record.

ICT and Me
Carlo Turk
The Netherlands

Messages: 187
Karma: 2
Send a private message to this user
Sorry, if I have understood, this is possible and very simple.
In the active node the failover is automatic, when the primary connection is down KControl try immediately reconnect with secondary wan.

To the main site (passive)you have only to setup dynamic Dns in the advanced tab, and subscribe a free auto DNS service (ex. Dyndns). Setting up an dyndns account, the Kcontrol give the active IP to service, and You just have to point (in the active) to the DynDns name, not to the static Ip.
Previous Topic: Correct DNS Configuration
Next Topic: Don't Display Logon Page
Goto Forum:

Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Oct 17 11:20:30 CEST 2017

Total time taken to generate the page: 0.00414 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.