2 Site MPLS to IP VPN Failover

[kquick]

We are trying to setup a two site MPLS network on AT&T to failover to a IPSEC site to site VPN automatically. Can this be easily done. This would be new using 2800 routers for MPLS and 2800 routers for the Internet connection. We have a PIX515E and ASA5510 for site to site VPN. I cannot find any solutions for this yet. AT&T allows static routes and BGP on the MPLS. Do we have any options to use GRE to enable Eigrp dynamic routing. Any help would be appriciated.

[paolo bevilacqua]

Hi,

yes the solution is to use GRE tunnels on both MPLS and internet clouds. Run any routing protocol and it will reroute around failures.

For the VPN you can or can not uses the PIX, (2801 support hardware encrption with adncaced ip service image), but the GRE tunnels must be terminated on the router anyway.

Hope this helps, please rate post if it does!