Michael Laccetti wrote:
Is it possible to setup both primary and secondary VPN servers, which
clients can round-robin to, as well as failover between them?
Sure -- just use different IP ranges for clients connected to the two
servers. If you want to have a global way to tell whether a client is
connected, to which server and with which IP address, use something like
dynamic DNS updates to publish this information.
Preventing a client from being on both servers at once while still
maintaining proper failover semantics is a little trickier, but still a
fairly straightforward piece of scripting.
That said, the diagram you provide looks like something... well,
completely and utterly different than what your text described. It
implies that the two servers are specific to the office sites, and
doesn't explain which systems on the sites in question act as OpenVPN
endpoints or which connections are over the Internet as opposed to a
LAN, and generally confuses more than it clarifies.
Openvpn-users mailing list