To create an IPsec tunnel, you must connect to one of the following Umbrella head-end IP addresses. Automatic failover provides redundancy for a single tunnel configuration; however, we recommend configuring two tunnels, one to each DC in a region, with unique IPsec tunnel IDs per tunnel.
In further sample configurations on docs.umbrella.com,
<*umbrella_dc_ip*> refers to these IP addresses.
Los Angeles, CA
Santa Clara (Palo Alto), CA
New York, NY
Dallas–Fort Worth, TX
Cape Town, ZA
Rio de Janeiro, BR
São Paulo, BR
*Hong Kong and 184.108.40.206 will be replaced by a second DC in India in the future. Hong Kong will be assigned a new region and IP at that time.
**Miami will be replaced by a second Latin America DC in the future with its own IP address. Customers can use Miami for automatic failover, or manually configure another data center for backup tunnels.
Cisco Umbrella implements automatic failover of IPsec tunnels when a data center is unavailable. When this occurs, tunnels automatically move from one data center in a region to the other. For more information see IPsec Tunnel Failover.
Previously, Umbrella supported automatic, tertiary failover (DR) for all regions. It is no longer available for US, Canada, Brazil, or Latin America regions, and will be removed in the future for remaining regions. Customers can optionally setup their own tertiary failover as a third tunnel to another region.
Updated 10 days ago