Experts,

Need your assistance again. I have a customer who has recently migrated leased lines based WAN with Internet based VPN connectivity.

Part 1 Requirements:

Each site has a primary (ADSL2+) and a secondary (SDSL) connection to the internet. In normal operation encrypted VPN tunnels carry only internet traffic via the SDSL connections to the other sites, all other traffic uses the ADSL2+ connection. This is currently installed and stared working.

Part 2 Requirements:

In the event of SDSL connection failure, they want VPN tunnels to automatically

fallback over ADSL2+ connection, and likewise if ADSL+ connection fail all general traffic should failover to SDSL connection. The VPN-based internet uses GRE/IPSec tunnels with NHRP to a central hub, running OSPF. Neither the SDSL nor the ADSL2+ terminate directly on our routers, but instead are presented via Ethernet from a third-party router in transparent bridge mode (the outside IP address appears on our Ethernet interface). We have tried to manipulate OSPF cost for primary and secondary failover but this isn't working.

Could you please provide your expert knowledge on how to resolve this issue and if possible a configuration would be a great help if anyone has gone through the same type of issue.

Thanks