This image shows how each Oracle Cloud Infrastructure dynamic routing gateway (DRG) has multiple VPN endpoints so that each IPSec VPN connection consists of multiple redundant IPSec tunnels that use static routes to route traffic.

The image shows an On Premises Network containing three Geographical Areas (GA), (A 10.20.0.0/16, B 10.40.0.0/16, and C 10.60.0.0/16). Each GA contains a subnet, GA A contains Subnet 1, GA B contains Subnet 2, and GA C contains Subnet 3. GA A and GA B are connected to a CPE router: GA A connects to CPE 1 142.34.145.37, GA B connects to CPE 2 137.15.129.4. GA C is connected only to GA B, a unidirectional arrow pointing from GA B to GA C..

The CPE routers connect over separate static routes to a VCN (VCN 17.2.16.0.0./16) via a Dynamic Routing Gateway, labeled Dynamic Routing headend. The VCN itself connects to a Default Routing Table wherein traffic is routed based on the GA.