Vyatta Network OS Documentation

Learn how to install, configure and operate the Vyatta NOS, which helps drive our virtual networking & physical platforms portfolio.

Multiple remote endpoints (client only)

In remote access mode, the remote-host argument must be specified on the client endpoints so that the clients can initiate the VPN sessions. In some environments, the administrator may want the clients to have a list of servers to provide some redundancy— if one of the servers fails, a client can try the next one. In the vRouter, this server list can be configured by specifying multiple remote-host entries.

To configure multiple endpoints on V2, perform the following steps in configuration mode.

Table 1. V2 OpenVPN multiple endpoints configuration
Step Command

Create the vtun0 configuration node.

vyatta@V2# set interfaces openvpn vtun0

Enter configuration commands.

...

Specify the physical IP address of the first remote host.

vyatta@V2# set interfaces openvpn vtun0 remote-host 12.34.56.78

Specify the physical IP address of the second remote host.

vyatta@V2# set interfaces openvpn vtun0 remote-host 12.34.56.79

Specify the physical IP address of the third remote host.

vyatta@V2# set interfaces openvpn vtun0 remote-host 12.34.56.80

Set the firewall rule for inbound traffic on the vtun0 interface.

vyatta@V2# set interfaces openvpn vtun0 firewall in name rules-in

Enter configuration commands.

...

Commit the change.

vyatta@V2# commit

Show the OpenVPN configuration.

vyatta@V2# show interfaces openvpn vtun0
 ...
 remote-host 12.34.56.78
 remote-host 12.34.56.79
 remote-host 12.34.56.80
 ...

When multiple entries are specified, a client starts from the beginning of the list and attempts to establish a VPN tunnel with the first remote host. If the first host does not work, the client tries the second one, and so on.

Note that multiple remote-host entries can also be specified in site-to-site mode. However, because the two endpoints are most likely fixed in this mode, such usage probably does not make sense in most cases.