Static Routing backup without tracking objects

Answered Question
Sep 3rd, 2010
User Badges:

Hi,


please see my setup attached.


I have static routing between MY SITE and the CUSTOMER SITE. There are IPSec VPN Tunnels with "tunnel protection" between the routers. Yet I would like to have automatic failover, when either the Internet connection or the MPLS connection goes down.


The 1st option would be to implement tracking via sla monitoring:

R03 has two static routes, one with metric 99:

     1. ip route <CUSTOMER_LAN> <TUNNEL_IF_R01> track 10

     2. ip route <CUSTOMER_LAN> <LAN_IF_R04> 99

R03 pings tunnel interface from R01, if it gets no reply, then tracking fails, and the 1st route gets deleted from the routing table. The 2nd route is used then. Same configs on the other routers vice versa.


This 1st option works fine. But I am searching for a second option. If I had a tunnel interface on the routers, that wents down, when the peer isn't reachable, then the primary static route would go down without tracking. This would be a much more smart and scalable solution to the problem. But how do I implement this?


Thanks for your help!

Attachment: 
Correct Answer by Nagaraja Thanthry about 6 years 11 months ago

Hello,


Route tracking is the easiest and better option to configure failover. In

your case, if you are looking for events like VPN tunnel going down, then

you could try EEM (Embedded Event Management). But, I would think route

tracking is an easier option as, in either case, you need to know that you

are not able to reach the remote destination and that is the reason the

tunnel went down.


EEM information:


http://www.cisco.com/en/US/docs/ios/netmgmt/configuration/guide/nm_eem_p...

y_cli_ps6441_TSD_Products_Configuration_Guide_Chapter.html


Hope this helps.


Regards,


NT

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Nagaraja Thanthry Fri, 09/03/2010 - 06:31
User Badges:
  • Cisco Employee,

Hello,


Route tracking is the easiest and better option to configure failover. In

your case, if you are looking for events like VPN tunnel going down, then

you could try EEM (Embedded Event Management). But, I would think route

tracking is an easier option as, in either case, you need to know that you

are not able to reach the remote destination and that is the reason the

tunnel went down.


EEM information:


http://www.cisco.com/en/US/docs/ios/netmgmt/configuration/guide/nm_eem_p...

y_cli_ps6441_TSD_Products_Configuration_Guide_Chapter.html


Hope this helps.


Regards,


NT

sebastian.lemke Tue, 09/14/2010 - 07:18
User Badges:

Thanks for your help!

I finally came to the conclusion, that tracking is the best solution....

Actions

This Discussion