We have Single VPN concentrator which is single point of failure, hence need your help to mitigate the same
Topology diagram is attached
Site A & Site B.
Site B has internet Gateways where we have existing VPN box.
Planning to introduce VPN gateway at site A & place VPN concentrator there as well
Our design is as under
Connectivity between both locations & other office is managed by BGP.
Default route is pointed toward Internet Gateway.
Internet Segment Info.
· We have SP Independent IP range
· Failover between 2 SP at site B is achieved using iBGP & eBGP
Challenge: VPN concentrator single Point of Failure (Cisco VPN Concentrator 3000)
Following are design goals
· Introduce internet gateways at Site- A which will have Site gateway level redundancy
· Place on VPN concentrator which will act as a failover between site
o If site B vpn concentrator is down site A VPN box should take over all the traffic.
o Replica of Site B active VPN concentrator
Is it possible to achieve above design goals.
Please help regarding VPN concentrator...How i can place VPN concentrator in failover mode ...Just like we do firewalls?
For ASA's you have to configure failover not VRRP. And yes you can use lan bases failover. You will find more information regarding this at the following link:
The distance shouldn't be a problem.
Also you should be able to rate the message if you are signed in.If you are signed in and still not able to rate a message then drop a not to the forum moderator.
The ASA has replaced the concentrator as a VPN headend. You will find more information regarding product migration here:
VPN Concentrator supports failover via VRRP. Please find the following document for your reference:
In regards to adding failover for VPN Concentrator, do you happen to have a spare VPN Concentrator to run VRRP?
Not sure if you know, however, VPN Concentrator is now end of life, and the last ship date was November 2007, hence you will not be able to purchase VPN Concentrator anymore.
Here is the EOL notificatin for your reference: