Hello,

I am looking to reconfigure the current network setup with the aim to provide a failover solution whilst keeping the two ISP networks seperate but still talk to each other for things like accessing servers and other IOT devices across the two networks, so I am wondering whether this could be done using P2P or via Site-to-Site IPsec VPN?

As I describe below that Building A currently has it's own ISP whereas Building B currently doesn't (but it is soon getting it's own ISP connection & ER605 or ER7206 router installed this month), the two buildings talk to each through the use of existing P2P devices (Pharos CPE510). Building A is currently the main point of where the magic happens, so ISP WAN comes into the ER605 router and then it transmits from CPE510 of Building A and receives to another CPE510 on Building B and into the LAN port of the smart switch. This method has worked really well over the last couple of years, in all weathers without a single problem!

Now the plan is to change this so that Building B can also act in the same way as Building A and therefore communicate to one and another using the existing P2P setup, providing a failover should Building A ISP connection goes down for any reason and instead receives internet through the new ISP from Building B, the same way should Building B's ISP goes down and vice versa. I presume these two CPE510s will need to be connected straight into the WAN port for it to work? I'd be happy to look at getting EAP211s if this is the case for this scenario?

Could someone suggest me the best router I should go for this type of setup? I currently have ER605 installed in Building A and I am thinking of getting ER7206 for Building B. Speaking of routers, I would like to know if it is possible to setup Site-to-Site IPsec VPN through these two seperate routers via Omada Cloud Controller? Doing this would eliminate the use of the P2P devices as I have explained above. So in an event of a failover, it should talk to each other via IPsec VPN but presume this would require some configuration to make it work?

I'd be happy to provide a network diagram to explain all this and the scenarios covered as explained in this topic.

Any suggestions and recommendations would be greatly appreaciated.

Many thanks,

Ben