- Posts: 2
- Thank you received: 0
IPSEC VPN resilience help
13 years 8 months ago #36365
by jimmy83
IPSEC VPN resilience help was created by jimmy83
[SiteA]: PIX
[SiteB]: 2 x cisco ADSL routers (separate ISPs)
>Currently there is a IPSEC VPN connection between SiteA and SiteB (using one of the 2 ADSL connections). One ADSL is spare at the moment.
Is that possible to configure automatic failover via IPSEC VPN so if one of the ADSL lines go down, PIX create VPN tunnel via spare ADSL line?
[SiteB]: 2 x cisco ADSL routers (separate ISPs)
>Currently there is a IPSEC VPN connection between SiteA and SiteB (using one of the 2 ADSL connections). One ADSL is spare at the moment.
Is that possible to configure automatic failover via IPSEC VPN so if one of the ADSL lines go down, PIX create VPN tunnel via spare ADSL line?
13 years 8 months ago #36385
by TheBishop
Replied by TheBishop on topic Re: IPSEC VPN resilience help
It's possible, but if you have a second ADSL sitting there which isn't being used, why not just have two point-to-point VPN tunnels and use the routing to prefer one leaving the other as a fallback?
13 years 8 months ago #36386
by jimmy83
Replied by jimmy83 on topic Re: IPSEC VPN resilience help
Thanks for your reply.
What, how can this be done if you have 2 tunnels to same site?
What, how can this be done if you have 2 tunnels to same site?
13 years 8 months ago #36499
by krik
Christophe Lemaire
www.exp-networks.be/blog/
Replied by krik on topic Re: IPSEC VPN resilience help
Hi,
As suggested by TheBishop use dynamic routing protocol (OSPF, RIP) in the tunnels between the PIX and the two ADSL routers...
Regards,
Christophe
As suggested by TheBishop use dynamic routing protocol (OSPF, RIP) in the tunnels between the PIX and the two ADSL routers...
Regards,
Christophe
Christophe Lemaire
www.exp-networks.be/blog/
Time to create page: 0.121 seconds