best way to use multiple wan links for bovpn ?

Norman

hello,
i found this document:
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/configuration_examples/bovpn_vif_loadbalance_example.html?Highlight=load balancing

are there other ways ?
is this possible if one side only has one wan-link ?

different os / different XTM

Bruce_Briggs

Review this:
Configure VPN Failover
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/bovpn/manual/vpn_failover_about_c.html

Norman

ok , my intension of "use" was not aktive/passiv failover but some kind of active/active solution ( load balance, load sharing, aggregation or something like that )

james.carson

Hi @Norman

You can use a BOVPN Virtual interface with metric based routes, However, there's not a way to load balance or use both WAN links for one tunnel at the same time.

Norman

hi James,
why does the OS not simply accept the same metric on BOVPN Virtual interfaces with the same route ?
could you make a feature request ?

james.carson

Hi @Norman

If the firewall had the same metric for two routes, it'll generally use whatever one it received first (there are some exceptions to this, mostly in sd-wan.)

I can look at making a feature request, but it's important to differentiate here that more connections does not equal more speed.

-What is the goal in your use case? (I need this information for the feature request.)
-What WatchGuard firewall do you use, and what OS is it running?

Norman

in this case it is a FireboxV-med , OS 12.5.2 used as a central VPN concentrator
goal is to utilize two uplinks on bovpn.
link aggregation is not needed, but balance the sessions equally would be nice.