Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

MPLS failover


We have mpls setup btw 3 sites.  i recently setup IPSec tunnel btw 3 sites for backup. Now if i shut the interface on my core where the MPLS router is connected, i lost the connectivity btw sites, even though i have setup static routes.


static route btw sites for MPLS is;

The VPN router IP address is and i have setup below static route 5 (metric) 5(metric)

when i bring down the MPLS router the traffic hits the ACL but not working. the route in VPN router is as under . 10..11.0.1

any guidance/help would be appreciated.


VIP Green

Do you have DMVPN setup

Do you have DMVPN setup between the sites?  If so, the spoke sites need to check in with the Hub site before it can establish a tunnel between the two spoke sites.  So here you would either need to set up a second hub router, or configure a full mesh s2s tunnel configure static IPsec tunnels between all sites.


Please remember to select a correct answer and rate helpful posts


Please remember to rate and select a correct answer

Hello It should be the



It should be the problem with the reverse routing.. Lets say for example, in Site 1 you have done the backup and you made the link down between router and the switch. So the switch takes the floating static route and forward the traffic to VPN router ( thats why you can see the hits) , though VPN might forward the traffic to the destination site -2, their the reverse route is still towards the MPLS router and the traffic drops



Hope this helps



New Member

HI Harish,What you are saying

HI Harish,

What you are saying is making lots of sense. How can i make the site 2 traffic towards VPN, with out shutting down the MPLS interface ?

HelloThere are couple of


There are couple of solution we can do here.. One is to run a protocol over the VPN and make the routing decision dynamic across both MPLS and VPN so that when an MPLS failure occurs , the site-2 will automatically remove the route towards your mPLS router and install the one with VPN router.. It really depends how is your setup and what kind of protocol you r running over MPLS..



New Member

we are using EIGRP btw sites,

we are using EIGRP btw sites, however i have static route to the MPLS router and i don't have access to that MPLS router. Can you send me an example or what i should ask my Vendor to configure on their MPLS router ?

thank you for your prompt reply though.

Hello Is it possible to



Is it possible to extend the eigrp till your core switch ?.. Please check that with vendor and if that is possible, you will learn mpls-site routes through eigrp and you can also run eigrp over vpn and between core switch and vpn routers .. then all about manipulating  the metric ( increase the link delay from core switch to VPN router so that it will be least preferred) 




New Member

thanks Harish, i will ask my

thanks Harish, i will ask my vendor. Also, Can you send me some config examples ? 

CreatePlease to create content