Add a failover group

  1. Go to VPN > IPsec connections.
  2. Scroll to Failover groups and click Add.
  3. Enter a name.
  4. Select at least two connections.
    If the primary connection fails, the secondary (or subsequent) active connection in the group automatically takes over and keeps traffic moving.
    Note The IP address of the remote ID must be the same for all connections in the group.
  5. Optional Enable Mail notification to receive connection failure notifications.
  6. Optional Enable Automatic failback to automatically fail back to the primary IPsec connection when it is restored.
  7. Specify the failover condition.

    The firewall considers a connection as failed if the failover condition is met.

  8. Click Save.

Click the status button to activate the group and establish the primary connection.