cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
433
Views
4
Helpful
3
Replies

Router to PIX VPN - Load Balancing Questions

lxcollin1
Level 1
Level 1

Hi All,

I have a 2821 router that has multiple circuits over different carriers. I want to setup a IPsec VPN from the 2821 to a PIX515. Is is possible to load balance the VPN over both circuits? Have you experienced this before? It seems that CEF per-packet would accomplish this, but I am not sure if performance would take a hit.

Thanks,

Lee

3 Replies 3

Not applicable

I am not sure if IPSec can be load balanced like that. How will the out-of-sequence packets be reassenbled at the gateway end? I know there is a sequence number in the ESP header, but that is used for replay detection. Not sure they can be used here. Any thoughts?

I believe that I remember a conversation with a TAC engineer when I was looking at some problems with a VPN connection in which he said that out of order packets are a problem with ESP.

HTH

Rick

HTH

Rick

Thanks for your responses!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: