Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Reg: Dynamic Switching of VPN client for Dual ISP

Dear Experts,

I was enclosed my network scenario.

I have two ISP connections. One is primary and other one is secondary.

Regardsing Primary ISP, i have two types of IPs. One is WAN IP pool and other one is public pool to used for DMZ.

WAN ip i configured in Router outside interface and LAN public pool  i configured between Router inside interface and Firewall outside interface( Firewall is accessble from internet with the public IP configured on outside interface)

In firewall i terminated Secondary ISP directly on interface called backup.

Firewall configured for ISP failover with sla tracking and its working fine. And firewall also configured for IPSec remote access VPN for mobile users. This is also working fine.

But here i am facing problem with VPN users that whenever primary ISP link was down the VPN user has getiing disconnecting. The user has manullay shifted to the secondary ISP that was configured in VPN client software in user machine.

Is there any way of shifting dynamically one ISP to another ISP when one of ISP got problem.

Regards,

Janardhan

5 REPLIES

Reg: Dynamic Switching of VPN client for Dual ISP

Hello Janardhan,

Below is a link which has a discussion on the similar topic in the forum. This may help you.

https://supportforums.cisco.com/community/netpro/security/vpn/blog/2011/04/25/ipsec-vpn-redundancy-failover-over-redundant-isp-links

Thanks

Vivek

*please do rate if helpful

New Member

Re: Reg: Dynamic Switching of VPN client for Dual ISP

HI Mr. Vivek,

Thanks for your prompt reply. I am verifying same with my customer. I hope

it will work.

I have on more query on this. How can i use my primary ISP given public IPs

through the secondary ISP when my primary ISP was down.

Regards,

Janaradhan

On Wed, Jan 25, 2012 at 5:54 PM, v.ganapathi <

Reg: Dynamic Switching of VPN client for Dual ISP

You cannot use the primary ISP routable IP pool on your secondary ISP.

New Member

Re: Reg: Dynamic Switching of VPN client for Dual ISP

HI Mr. Vivek,

If i run BGP in my router, then it will advertise my primary public pool to

the secondary ISP. Is right or not???

Regards,

Janardhan

On Wed, Jan 25, 2012 at 7:52 PM, v.ganapathi <

Reg: Dynamic Switching of VPN client for Dual ISP

Yes, you may advertise it, but when you loose the reachability to your primary ISP, ultimately you loose your BGP session as well & then even your advertisements

Hope its clear.

Thanks

Vivek

460
Views
4
Helpful
5
Replies
CreatePlease to create content