Multiple PepVPN Profiles - License Question

Product Discussion Pepwave MAX
4

No worries there - both of these models support 2 active PepVPN profiles at the same time - all Peplink routers do.

It doesn’t contradict that page.
Speedfusion (Hot failover and Bonding) is an add on in that it is enhanced VPN capability, but the hot failover element it is referring to is how traffic is sent over WAN links at a packet level, not how traffic can be routed between datacenters at a VPN tunnel level.

That diagram shows this:

image
What it is saying is (from bottom to top):

  1. All Peplink devices that support VPN (which is just about everything pretty much) support PepVPN. This is an easy to configure, point to point VPN technology - session based, that only uses a single WAN link at any one time (and can cold failover between wan links on a priority basis - but the failover would cause sessions to drop).

  2. Speedfusion Hot failover is a premium feature enhancement to PepVPN, and because it can split sessions up over multiple WAN links at the same time it is a Speedfusion feature rather than a PepVPN feature (we talk about Speedfusion whenever we are using VPN with multiple links at a packet level).
    Many devices now support Speedfusion Hot Failover. In fact if you have a Peplink device that can have multiple WAN links active at the same time then I think it will always support Speedfusion hot failover now by default.
    The big thing here is that although you can seamlessly fail sessions over from one WAN to another at a packet level, hot failover can only ever actively use one of those WAN links at any one time to transmit data.

  3. Speedfusion Bonding is all the above capability but with the ability to send VPN traffic over multiple WAN links at the same time, distributing a session across more than one link at a packet level.

Now the BR1 Mini is an outlier when it comes to licensing as it was designed to be a commercial answer to the need for a very cost effective device for cellular routing only (think the worlds best MiFi or high volume industrial router for vending machines).

Out of the box then the wired WAN and Wifi WAN does not work on a BR1 Mini - just the cellular WAN. As a single WAN device, Hot Failover is not supported but it can still build 2 x PepVPN tunnels to two different datacenters.

You can buy a license for the BR1 Mini (MAX-BR1-MINI-LC-FS) which gives you:
Failover software license and related feature set for BR1 MINI and BR1 ESN
Enables Load Balancing, WAN Smoothing, PepVPN hot failover, Ethernet and Wi-Fi WAN

The rest of the BR1 family comes with all WANs enabled by default which means they also support SpeedFusion Hot Failover by default.

Your original question - about how to get a remote device to failover between datacenters is more of a routing question. ie when a single remote device is connected to two datacenters at the same time which way should traffic flow and how should traffic flow back?

This can sometimes be as easy as setting a higher OSPF cost metric on the backup VPN tunnel. Other times we might need to use BGP, or an availability based approach to failover.

2 Likes