Creating a VBonded VPN

The UBM VPN Bonding feature allows you to transparently intercept VPN’s created by your firewall and distribute the traffic over multiple links. This allows increased bandwidth and real-time failover when link failure occurs.

To start, first follow the UBM Appliance Quick Installation Guide.

Once all links are functioning and verified on both UBM Appliances, proceed to create Virtual Tunnels between the two devices.

1. From the Links group, choose Virtual Tunnels and Add a Tunnel from the action menu.

   Local Endpoint	Select the desired Link
   Remote Endpoint	Type the Endpoint IP of the remote UBM
   Local Virtual IP	Each tunnel requires an Virtual IP to identify itself, eg.1.1.1.1
   Remote Virtual IP	Assign a Virtual IP for the remote device eg. 1.1.1.2

2. Apply this Tunnel, and repeat this procedure for each link you want to use.
3. On the remote device, follow the same process, inverting the IP address used in the previous step.
4. From the Entities group, choose Interface Team and Add a Team from the action menu.
5. Select the Virtual Tunnels option and then select each of the tunnels you want to be used for this Bonded VPN. In the Algorithm list, choose Simple Bonding and Apply This Team.
6. Next we need to create an Outbound Policy that will direct traffic over our Team of Virtual Tunnels.
7. From the Entities group, choose Address Aliases and Add an Entity from the action menu.
8. Choose Remote IP Address, type the IP address of the remote firewall device and Click Apply this Entity.
9. From the Routing Policy group, choose Outbound Policies and Add a Policy from the action menu.

   Source	Select the Source Subnet, this will be your firewall if you are using a Transparent Interface or the LAN Subnet if you are using a LAN Interface
   Destination	Choose the Address Alias you created in Step 8.
   Service	Usually this should be set to Any
   Team	Choose the Interface Team you created in Step 5.
   Translate	Network Address Translation should be Disabled.

10. Apply this Policy.
11. At the top, right of the screen choose Commit Changes.
12. Finally, verify the Virtual Tunnels are active in the Live Link Monitor and the VPN between the 2 sites is active between the firewalls.