Link controlling vpn

Hi Hamza, Sorry for replying that late.

 

Link Controller itself does not provide the ability to terminate VPN tunnels.

 

For pure high availability of VPN services it may be used.

 

It´s probably easy in the case of SSL VPN because DNS name resolution is very likely involved (client tries to connect to a SSL VPN gateway by using it´s FQDN) and TCP/443 for transport.

 

It becomes more difficult with IPSec based VPN for several reasons:

 

1. Tunnel end points might be addressed directly via IP addresses (no DNS name resolution involved).

 

2. IPSec is using two protocols (ESP and UDP/500).

 

3. UDP-wrapping may be required to avoid NAT related issues (the Link Controller has to apply destination NAT on incoming packets and source NAT on outgoing packets).

 

4. The Link Controller has to be configured to apply SNAT to all IP traffic (by default only TCP and UDP based traffic is SNATed).

 

In the bottomline it can work in case you are considering the points above.

 

Happy new year, Stephan