Configure Group Settings for VPN Load Balancing

You can enable VPN load balancing and configure group settings that are applicable to all the members of the load-balancing group. When you create the group, you can configure participation settings for load balancing.

Procedure

Step 1

Choose Devices > VPN > Remote Access.

Step 2

Click Edit on the remote access VPN policy that you want to update.

Step 3

Click Advanced > Load Balancing.

Step 4

Click the Enable Load balancing between member devices toggle button to enable load balancing.

The Edit Group Configuration page opens. Group parameters apply to all devices under the load-balancing group.

Step 5

Specify the Group IPv4 Address and Group IPv6 Address as applicable.

The IP address that you specify here is for the entire load-balancing group and the director opens this IP address for incoming VPN connections.

Step 6

Select the Communication Interface for the load-balancing group. Click Add to add an interface group or security zone.

Communication interface is a private interface through which the director and members share information about their load.

Step 7

Enter the UDP Port for communication between the director and members in a group. The default port is 9023.

Step 8

Enable the IPsec Encryption toggle button to activate IPsec encryption for the communication between the director and members.

Enabling the encryption establishes an IKEv1/IPsec tunnel between the director and members using a pre-shared key.

Step 9

Enter Encryption Key for IPsec encryption and confirm the encryption key.

Step 10

Click OK.