VPN Tunnel Redundancy

[Rex Biesty]

Hi. I'm after some general advice on how to set up a redundant VPN tunnel.

We have an Cisco 1801 device at a remote site with a primary ADSL connection and an ISDN backup. The 1801 is setup so that it sould fail over to the ISDN line should ADSL fail. The 1801 also has a site-to-site VPN to a Pix 515e (using s/w v7.2) over the ADSL line.

I would like to set up the 1801 with a redundant site VPN over the ISDN that will switch over if ADSL fails and switch back when ADSL resumes.

Any guidance on how best to achieve this would be greatly appreciated.

Thanks, Rex.

[sadbulali]

Once the switchover takes place from ADSL to ISDN the vpn tunnel present on the ADSL link will go down and a new vpn tunnel on the ISDN link must be created manually since the vpn tunnel cannot be created automatically after switchover.

[Rex Biesty]

Hi, thanks for the reply. I have 2 tunnels set up, one on the ADSL line and one on ISDN with the ADSL currently being active. Would I be right in thinking that when the ADSL line fails, the ISDN line will become active along with the VPN tunnel on that line. Then, once the ADSL line comes back, the ISDN line will drop and the ADSL tunnel will resume?

Thanks, Rex