Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
352
Views
0
Helpful
1
Replies

VPN3000, IPSec LAN-to-LAN tunnels and load-sharing

lucy.west
Level 1
Level 1

‎05-21-2002 05:58 AM - edited ‎02-21-2020 11:45 AM

hi

we have the following set-up:

Head Office:

2 x 3030's - on same LAN

connecting into 2 different Routers, with 2 circuits into 2 different Worldcom POPs

Remote Office

1 x 3005 connecting into 2610 Router, with 1 circuit into Worldcom POP

What we are trying to achieve is tunnel redundancy; so that from the 3005 will have 2 IPSec LAN-to-LAN tunnels into the same Head Office LAN; but one will be a primary tunnel, and one will be a back-up.

Is there any way to configure the remote concentrator so that the tunnel has a preference value?

Labels:
0 Helpful
1 Reply 1

jfrahim
Level 5
Level 5

‎05-23-2002 12:28 PM

you can enable VRRP on the CORP concentrators. You would have 2 active tunnels at the same time, but as soon as the master concentrator fails, your remote should be able to connect to the Standby concentrator

Jazib

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents