I am not sure if this question belongs here but figured a good place to start. We are looking into using VPN Lan-to-Lan tunnels to backup our T-1s to our remote locations. I am in that santiy check / configuration phase in regards to the big picture plan. I am planning to use the second ethernet interface on the routers to configure the Lan-to-LAN link back to our corporate concentrators. Current questions / concerns ...
1) Should I monitor the T-1 and only build the tunnel at useage time or better to have the tunnel always up and rely on say routing metrics to move the traffic?
2) Most facilites currently must ride the T-1 to get out to the internet but I do have a couple that have their own PIX. Is the best option to bypass the PIX with a cable or try to tunnel through the PIX?
3) Can anyone point us to any configuration samples / documentation for using LAN-to-LAN as a backup?