Including Oracle recommendations on how to manipulate the BGP best path These routes are not learned dynamically.įor more information about routing with Site-to-Site VPN, You also must configure your CPE device with static routes to the Specify the particular routes to your on-premises network that you want the VCN
Tunnels on geographically redundant IPSec headends. For each IPSec connection, Oracle provisions two Oracle Console and create a separate IPSecĬonnection between your dynamic routing gateway (also known as customer-premises equipment (CPE)). Have Redundant CPEs in Your On-Premises Network LocationsĮach of your sites that connects with IPSec to Oracle Cloud Infrastructure should have redundant edge devices This is a key part of the "Design for Failure" philosophy.
Oracle recommends configuring all available tunnels for maximum redundancy. On the Oracle side, these two headends are on different routers for redundancy purposes. Oracle deploys two IPSec headends for each of your connections to provide high availability for your mission-critical workloads. Configure All Tunnels for Every IPSec Connection