Router to PIX VPN - Load Balancing Questions

[lxcollin1]

Hi All,

I have a 2821 router that has multiple circuits over different carriers. I want to setup a IPsec VPN from the 2821 to a PIX515. Is is possible to load balance the VPN over both circuits? Have you experienced this before? It seems that CEF per-packet would accomplish this, but I am not sure if performance would take a hit.

Thanks,

Lee

[#2]

I am not sure if IPSec can be load balanced like that. How will the out-of-sequence packets be reassenbled at the gateway end? I know there is a sequence number in the ESP header, but that is used for replay detection. Not sure they can be used here. Any thoughts?

[Richard Burts]

I believe that I remember a conversation with a TAC engineer when I was looking at some problems with a VPN connection in which he said that out of order packets are a problem with ESP.

HTH

Rick

[lxcollin1]

Thanks for your responses!