Load balancer instances are configured in the Instances table.
- VRRP-ID
- VRRP-ID (router ID) to be used for this IKEv2 load balancer instance. VRRP must be activated on this device and configured for this VRRP ID.Possible values:
- 0 to 255
- Default: 1
- Local IPv4 redirect target
- IPv4 address or FQDN on which the device is to receive VPN tunnels. A VPN client is forwarded to this address by the master in the load-balancer cluster.Note: This is not the virtual VRRP-IP address.
- Message profile
- Message profile to use for this instance. The message profile contains the parameters for the status log used by the device to communicate its status information to the load balancer cluster.Default: DEFAULT.
- Redirection mode
- Specifies at which phase of the IKEv2 negotiation the VPN gateway redirects clients to another gateway.Note: This parameter only takes effect if the device is VRRP master.Possible values:
- IKEv2-Init (default)
- The redirect message is sent in the IKE_SA_INIT response from the VPN gateway.
- IKEv2-Auth
- The redirect message is sent in the IKE_AUTH phase after the client has identified itself to the VPN gateway.
- Redirection destinations
- Specifies the destination to which the VPN client is redirected.Note: The parameter only takes effect if the device is VRRP master.Possible values:
- Local or remote
- Clients are redirected to the device's own IP address and also to other remote gateways in the cluster.
- Remote only
- Clients are only redirected to other VPN gateways. This results in VPN clients being evenly distributed between all gateways except for the master gateway.
Note: This can be used to configure scenarios in which the load balancer master only distributes the clients, but does not terminate any VPN tunnels itself. - Comment
- Enter a descriptive comment for this entry.
