Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My network is below, it's currently just an ordinary, the branch offices needs to have access to resources on the main site. Currently all internet traffic go across the bridge and through the Watchguards WAN connection. The Watchguard issues all DHCP leases to both sites.

enter image description here

Currently the Branch site WAN connection isn't operational but when it is, I want to make it so if the wireless bridge fails all traffic to the Main Site is routed over a VPN over the internet automatically.

How can I achieve this using the products and their features at hand? I'm not very familiar with the products. I understand that the Watchguard has a BOVPN feature and the SSG20 has VPN support but how would I also setup the routing? Is it possible to convert the wireless bridge into a WAN and just try to setup a Multi-WAN setup (with one WAN being a VPN) on both products?

share|improve this question
up vote 0 down vote accepted

You might want to look at a dynamic routing protocol like OSPF which both devices seem to support. However that would require that you give the main office one network range, and the branch office another. Whether that's the case now or not isn't clear from your question!

With OSPF, both paths would be active at the same time, however your wireless bridge would have a lower cost. In the case of failure, the higher cost of the VPN would suddenly become acceptable, and the traffic should start routing over that.

share|improve this answer
The whole network is just, at the moment each host has to be able to access every other host on the network. – 5graeham5 Mar 1 '12 at 10:11
If it's pure routing with the firewall rules setup as necessary on each side, there's no reason they wouldn't be able to continue to connect directly. Putting each office on a separate network will make life easier further down the line as well when and if more are added. – Niall Donegan Mar 1 '12 at 15:11

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.