Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Alternate VPN connection routing.

I have a remote location that connects through Sprint to my central site (NYC)via a Sprint directed VPN called a half-tunnel. I recently had a new circuit installed at the remote location for redundancy which points to the Internet and I have set an IPSec site-to-site VPN from my PIX in NYC to the remote location. I configured the Sprint facing router with an alternate default gateway to point to the redundant circuit. When I fail the Sprint facing circuit the Internet traffic continues to work through the other circuit, I transmit pings to create interesting traffic and the site-to-site VPN comes up. But the return traffic doesn't seem to find it's reurn path. The NYC PIX is connected to the Sprint VPN via an IPSec VPN. Can I set NYC PIX to direct the traffic to an alternate VPN if a failure occurs. We will be migrating to full MPLS soon, but I wanted to make this work as described now. Is it possible?

1 REPLY
Cisco Employee

Re: Alternate VPN connection routing.

You configure the PIX with another IP address on the set peer command.

Eg:

cry map mymap 10 set peer 10.10.10.1

cry map mymap 10 set peer 10.10.10.2

Let me know if this works.

Thanks

Gilbert

164
Views
5
Helpful
1
Replies
CreatePlease to create content