DMVPN High Available

cassio.gomes · ‎06-25-2007

Dear All,

I have a DMVPN scenario, and it works very fine. Now I would like to put a new Hub router, as backup, and between HUB1 and HUB2, I have configured HSRP and the spokes routers connect in the Virtual IP Address.

After this configuration, the vpn goes down.

So I need help to solve this issue in this scenario, DMVPN with primary and secondary HUB.

Best Regards,

CLRGomes

wong34539 · ‎06-29-2007

Try these links:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008014bcd7.shtml

http://www.cisco.com/en/US/products/ps6635/products_white_paper0900aecd803498b1.shtml

cassio.gomes · ‎07-03-2007

Thanks, but these links don't solve my problem.

I would like to configure HSRP between the HUB routers.

CLRGomes

rselmecz · ‎07-04-2007

Hello Cassio,

Do you need HSRP on the outside interfaces?

And do you insist to keep them to use this?

What if you try to implement this:

Dynamic Multipoint IPsec VPNs (Using Multipoint GRE/NHRP to Scale IPsec VPNs)

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml#dualhubsingle

HTH

// Roland

cassio.gomes · ‎07-04-2007

Hello Roland,

I need to configure HSRP between two HUBs routers. The virtual IP is the gateway to spokes routers connect. The two HUBs routers is configured with Fastethernet interface, and there is a firewall first. With one hub, it works very fine, when I configure HSRP, the vpn goes down and I have a error.

Thanks

CLRGomes

gearnsc · ‎07-09-2007

The easist way to set this up would be two DMVPN networks with two hubs and each spoke having two tunnel interfaces. You wouldn't have HSRP functionality but you could weight a routing protocol to favor one hub over the other. While not as easy as HSRP to setup you could reuse much of the existing configuration, changing only the IP addresses and Tunnel Interface numbers.