Vyatta NOS documentation

Learn how to install, configure, and operate Vyatta Network Operating System (Vyatta NOS), which helps to drive our virtual networking and physical platforms portfolio.

Multiple remote endpoints (client only)

In remote access mode, the remote-host argument must be specified on the client endpoints so that the clients can initiate the VPN sessions. In some environments, the administrator may want the clients to have a list of servers to provide some redundancy— if one of the servers fails, a client can try the next one. In the vRouter, this server list can be configured by specifying multiple remote-host entries.

To configure multiple endpoints on V2, perform the following steps in configuration mode.

Table 1. V2 OpenVPN multiple endpoints configuration
Step Command

Create the vtun0 configuration node.

vyatta@V2# set interfaces openvpn vtun0

Enter configuration commands.

...

Specify the physical IP address of the first remote host.

vyatta@V2# set interfaces openvpn vtun0 remote-host 12.34.56.78

Specify the physical IP address of the second remote host.

vyatta@V2# set interfaces openvpn vtun0 remote-host 12.34.56.79

Specify the physical IP address of the third remote host.

vyatta@V2# set interfaces openvpn vtun0 remote-host 12.34.56.80

Set the firewall rule for inbound traffic on the vtun0 interface.

vyatta@V2# set interfaces openvpn vtun0 firewall in name rules-in

Enter configuration commands.

...

Commit the change.

vyatta@V2# commit

Show the OpenVPN configuration.

vyatta@V2# show interfaces openvpn vtun0
 ...
 remote-host 12.34.56.78
 remote-host 12.34.56.79
 remote-host 12.34.56.80
 ...

When multiple entries are specified, a client starts from the beginning of the list and attempts to establish a VPN tunnel with the first remote host. If the first host does not work, the client tries the second one, and so on.

Note that multiple remote-host entries can also be specified in site-to-site mode. However, because the two endpoints are most likely fixed in this mode, such usage probably does not make sense in most cases.