Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

HA between Dedicated T1 and L2L VPN

I'm looking for ideas on how to have complete HA between a dedicated T1 and an L2L VPN over the internet.

We had discussed routing protocol OSPF but would like to avoid the converge issues that could rise and affect other customers in the same DMZ.

What would be our options if we do not want to use a routing protocol? How could we fail over to the backup line, the L2L, should the T1 fail. I had mentioned changing the metrics but this will not identify a problem on the line should the customers ethernet link goe down.

Feel free to include an ideas that would use routing protocols.


Re: HA between Dedicated T1 and L2L VPN

Hi Paul

Can you post back the topology of your network briefing out how the links are connected and the devices on which the links are connected ..

Also throw more clarity on the remote end devices as well as termination points over there..


New Member

Re: HA between Dedicated T1 and L2L VPN

I had to revisit this configuration. I had decided since we are not going to use a routing protocol that a floating route between the T1 router and VPN is the best solution. although this should work if the router or Ethernet of the router goes down it should fail if the the Ethernet interface of the router, which has OSPF running between their network and our LAN, does not fail.

But it is not failing?

I have attached a diagram.

New Member

Re: HA between Dedicated T1 and L2L VPN

Can you use a separate instance of OSPF on the router with the backup link? So if you are running router ospf 1 on all of your devices, and say router ospf 101 on your backup link, 101 will not converge into 1.

CreatePlease to create content