First, let me state that I'm not a CISCO Hands on Expert. I am trying to architect what appears to be a means for dealing with a common scenario. I am in need of some assistance in helping guide me a bit.
We have several small branch offices that have a router with private point-to-point connectivity as well as an internet router that provides internet access.
our goal is to attempt to create an IPSEC VPN (Site-to-Site) back to a corporate ASA-5510 at our data center using the INTERNET medium to access our private network. We also want to use the private point-to-point connection to connect as a last resort should the primary (IPSEC VPN) fail.
So we've got a 2800 series router and have setup a static Site-to-Site VPN to our ASA-5510 at the corporate router.
At the client site, this 2800 series router uses the Internet Medium (DSL)as the primary medium.
The 2800 has multiple WAN ports and we've hooked up that router and configured a private Point-to-Point address on it.
SO the question comes down to how to setup routing to use the VPN route FIRST as the primary route, and then use the Point to Point as the backup route.
I was thinking somehow that EIGRP is the answer, but i'm not sure.
So i need some guidance. What technologies or protocols can you folks guide me to that helps me accomplish this.
This is a single router with multiple WAN ports. I was looking at HSRP, but i don't have another router in play at the client site.
What i'm trying to establish is a routing table / protocal that re-routes traffic should the VPN go down over the OTHER Fast Ethernet WAN interface.
I'm worried about bringing up EIGRP because I don't want to cause routing loops inadvertently as this is not my area of "hands on" expertise.
I don't even know if this is the right protocol (EIGRP) to do the job.
The goal isn't to provide redundant ROUTERS, but redundant ROUTES to the destination (our corporate data center).
Any guidance, terms, insights into appropriate protocols, links, would be greatly appreciated.
To me, this seems so trivial. but i'm not familiar enough from a hands on basis to make this happen.
i appreciate any and all guidance you are willing to provide.