Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Load Balancing over Multiple IPSEC SAs

I need to load balance IPSEC with GRE over multiple T1s. My current solution is to use two routers, one to hold the physical T1s and the other to form a single SA back to the home router. If I use one router, the traffic does not load balance over the multiple SAs that are formed to the home router. Is there a way to bundle the T1s into a single, virtual interface so that I only use one SA?

1 REPLY
Silver

Re: Load Balancing over Multiple IPSEC SAs

IPSec is supported with process and fast switching. To get load balancing with the same DA/SA pair the router must be process switching. If the performance of process switching is enough, then you can do it.

114
Views
0
Helpful
1
Replies
CreatePlease to create content