We have launched the new version of the DrayTek website, and this content is no longer being maintained.
You will find more information on our new site; however, we will keep this page for a few months.

VPN Load Balance between Vigor3900 and Vigor Router - GRE over IPsec

For routers with multiple WAN interface, using VPN trunk allows network administrator to load balance traffic across multiple VPN tunnels between Vigor routers. This note is going to demonstrate while building a LAN-to-LAN VPN tunnel between Vigor3900/2960 and other Vigor routers(e.g., a Vigor2860), how to use VPN trunk to add an additional VPN for load balancing.

 

Configuring Vigor2960 as VPN server

1. Go to VPN and Remote Access >> VPN Profile, add a profile in IPsec

  1. Give Profile name and Enable this Profile
  2. Select Dial-Out Through as “wan1”
  3. Enter Local IP/mask as the LAN network on Vigor2960
  4. Enter Remote IP/mask as the LAN network on Vigor2860
  5. Type Pre-shared Key
 

2. Go to GRE tab. Enable GRE function, give a GRE IP for Remote and Local site.

 

3. Create another IPsec VPN profile similar to the first one, but select Dial-Out Through as wan2,

 

4. Go to GRE tab, give it a different GRE IP than the first profile.

 

 

 

Configuring Vigor2860 as VPN Client

1. Go to VPN and Remote Access >> LAN to LAN, click on an available index

  1. Give Profile name and Enable this Profile
  2. Select WAN2 Only for VPN Dial-Out Through interface
  3. Select Dial-Out as Call Direction and enable Always on
  4. Select IPsec as VPN type and enter server IP as the WAN IP of Vigor2960
  5. Enter same IKE Pre-Shared Key as Vigor2960 configures
 

  1. Enable IPsec dial-out function GRE over IPsec
  2. Type GRE IP which matches to Vigor2960's profile 1
  3. Enter Remote network IP and mask
 

2. Create another VPN profile similar to previous one, but select other available WAN as VPN Dial-Out Through interface, and type the GRE IP which matches Vigor2960's VPN profile 2

 

 

 

Configuring VPN Load Balance

1. Configure VPN load balance on Vigor2960, Go to VPN and Remote Access >> VPN Trunk Management, add a profile in Load Balance Pool tab, and add the VPN profiles as interface and enter the load balance weight.

 

2. Go to Load Balance Rule tab and add a profile

  1. Enter Source IP as the network on Vigor2960
  2. Enter Destination IP as the network on Vigor2860
  3. Select Load Balance Pool as the profile created in step b
  4. Click Apply to save
 

3. Configuring VPN trunk on Vigor2860: Go to VPN andRemote Access >> VPN Trunk Management >> General Setup,

  1. Enable it and give profile name
  2. Select the two VPN profiles as Members
  3. Select Load Balance as Active mode
  4. Click Add to apply
 
Was this article helpful?
13VPN Load Balance between Vigor3900 and Vigor Router - GRE over IPsec has been viewed------ 13 ------times.