Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN3000, IPSec LAN-to-LAN tunnels and load-sharing

hi

we have the following set-up:

Head Office:

2 x 3030's - on same LAN

connecting into 2 different Routers, with 2 circuits into 2 different Worldcom POPs

Remote Office

1 x 3005 connecting into 2610 Router, with 1 circuit into Worldcom POP

What we are trying to achieve is tunnel redundancy; so that from the 3005 will have 2 IPSec LAN-to-LAN tunnels into the same Head Office LAN; but one will be a primary tunnel, and one will be a back-up.

Is there any way to configure the remote concentrator so that the tunnel has a preference value?

1 REPLY
Bronze

Re: VPN3000, IPSec LAN-to-LAN tunnels and load-sharing

you can enable VRRP on the CORP concentrators. You would have 2 active tunnels at the same time, but as soon as the master concentrator fails, your remote should be able to connect to the Standby concentrator

Jazib

84
Views
0
Helpful
1
Replies