This image shows how each Oracle Cloud Infrastructure dynamic routing gateway (DRG) has multiple VPN endpoints so that each IPSec VPN connection consists of multiple redundant IPSec tunnels that use static routes to route traffic.

The image shows an On Premises Network containing two Geographical Areas (GA), (A 10.20.0.0/16 and B 10.40.0.0/16). Each GA contains a subnet, GA A contains Subnet 1, GA B contains Subnet 2. Each GA is connected to a CPE router: GA A connects to CPE 1 142.34.145.37, GA B connects to CPE 2 137.15.129.4. The CPE routers connect over separate static routes to a VCN (VCN 17.2.16.0.0./16) via a Dynamic Routing Gateway, labeled Dynamic Routing headend. The VCN itself connects to a Default Routing Table wherein traffic is routed based on the GA.