A branch router can hold two IPsec sessions at once. The business needs the site-to-site connection to keep working when one Azure gateway instance is lost. Which gateway configuration should you choose?
Show answer and explanation
Answer: C
An active-active VPN gateway runs two gateway instances, each with its own public IP address, and both can carry tunnels at the same time. The branch device establishes a tunnel to each address, so losing one instance does not drop the connection. An active-standby design keeps only one instance live at a time.
Why the other options are wrong
- A. The Basic SKU has limited capabilities and no active-active support. Losing its single instance interrupts the tunnel, so it does not meet this redundancy need.
- B. Active-standby keeps a failover instance, but only one instance carries traffic at a time. The branch sees a brief interruption while the standby takes over.
- D. ExpressRoute Local is a private circuit product rather than an IPsec tunnel option for a VPN router. It does not solve gateway instance failure for this VPN link.