[Openswan Users] Failover using two ISP

[Paul Wouters]

On Thu, 17 Jun 2010, Aurimas Skirgaila wrote:

> my Openswan machines are almost 20 hops away each other, so internet problems somewhere in the middle break my VPN.
> 
> at host A I have eth1 and eth2 for two ISP, so I want, that if tunnel A.eth1 <==> B would fail, the A.eth2 <==> B would come up.
> 
> 
> I bet this is not an uniqe problem, so what is the standard way to accomplish this kind of automatic failover?

It's somewhat complex, and requires using GRE and a routing daemon. See:

http://www.xelerance.com/talks/ha/

Paul