Skip to main content

IPSEC VPN resilience help

More
13 years 8 months ago #36365 by jimmy83
[SiteA]: PIX
[SiteB]: 2 x cisco ADSL routers (separate ISPs)

>Currently there is a IPSEC VPN connection between SiteA and SiteB (using one of the 2 ADSL connections). One ADSL is spare at the moment.
Is that possible to configure automatic failover via IPSEC VPN so if one of the ADSL lines go down, PIX create VPN tunnel via spare ADSL line?
More
13 years 8 months ago #36385 by TheBishop
It's possible, but if you have a second ADSL sitting there which isn't being used, why not just have two point-to-point VPN tunnels and use the routing to prefer one leaving the other as a fallback?
More
13 years 8 months ago #36386 by jimmy83
Thanks for your reply.
What, how can this be done if you have 2 tunnels to same site?
More
13 years 8 months ago #36499 by krik
Replied by krik on topic Re: IPSEC VPN resilience help
Hi,

As suggested by TheBishop use dynamic routing protocol (OSPF, RIP) in the tunnels between the PIX and the two ADSL routers...

Regards,
Christophe

Christophe Lemaire
www.exp-networks.be/blog/
Time to create page: 0.121 seconds