Run BGP with $ISP on both Main and Satellite site... Just announce a unique /24 prefix from each site. No need to run VPN, unless you are using private addresses. Ensure to have ROA & route objects correctly registered at RIR database. -- have you enabled IPv6 on something today...? Chriztoffer 📧 from 📱 device.