Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am making a project for school with 3 offices wich are connected with vpn, the main server infrastructure is located in the head office and i am trying to remove all the single point of failures. But you can use failover clusters all you want but if your vpn go's down they dont mean a thing. So my question is, what is the best way to get vpn failover?

share|improve this question

Get a second Internet connection at each location (or at the "head office" if you want to spend less money) and establish a second set of VPN tunnels between the sites. Use a dynamic routing protocol or a "heartbeat" / SLA function in your VPN routers to dynamically alter the routing of traffic over the VPNs if one of the Internet connections fails.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.