A VPN architecture must survive the failure of one gateway interface while meeting the documented HA topology requirements. Which approach best fits?

1. Configure redundant HA VPN tunnels across the required interfaces and peers.
2. Inspect BGP advertisements, learned routes, and relevant route scope.
3. Set and test supported routing priorities and BGP attributes for the intended preference.
4. Use a supported equal-cost multipath routing design.