Question

Your company runs a business-critical workload in Azure that requires a highly available site-to-site VPN connection to the on-premises data center. The on-premises edge consists of two independent VPN devices, each with its own public IP address. You must design the Azure VPN gateway so that a failure of a single Azure gateway instance OR a single on-premises VPN device does not interrupt connectivity. Which design should you implement?

Accepted Answer

Deploy an active-active Azure VPN gateway with two gateway public IPs, and create a separate connection from each Azure gateway instance to each of the two on-premises VPN devices (dual-redundancy).

Answer

Deploy an active-standby Azure VPN gateway with a single public IP and configure a single connection to a load balancer that fronts both on-premises VPN devices.

Answer

Deploy two separate active-standby VPN gateways in the same virtual network, each connected to one on-premises VPN device.

Answer

Deploy an active-active Azure VPN gateway with a single public IP and one local network gateway pointing to both on-premises device IPs.