First off We have an existing Site-Site IPSEC VPN (route based) between our office and our Azure cloud. This works exactly as it's supposed to. We just got a backup internet connection (Cradle point) for fail over situations. The internet backup is functional, and I've set up an alternate connection with the IP address of our backup option, but the site-site VPN never comes back up when we do a fail over test. Functionally, on the "local" side, the same firewall is initiating the connection, so what I've done is set up the backup connection to use the same PSK, but to the ip of the backup internet rather than our "normal" IP.
Here's a hypothetical setup:
Main internet: 220.127.116.11 PSK: ABC
Backup internet: 18.104.22.168 PSK: ABC
Azure VNG: 22.214.171.124 PSK: ABC
The VPN between Main and Azure works perfectly. The tunnel is up and passes information normally. When we attempt a failover test, the connection between 126.96.36.199 and 188.8.131.52 never comes up, despite having a "Connection" of it's own in Azure. Any help at all is appreciated.