Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Redundant link via VPN

Dear Team,

we have a problem in routing  between primary and secondary links.

we have a two office and we are connected with intranet 2 Mb and we have configured back-up Site-Site VPN on firewall for remote office.

Now the problem is when the primary is down, we have to change the routing to the secondary. this takes downtime and create much problem.

.So please help to configutre with out any manual support for changing the routing.

Please find the attached network dig.

Thanks.

regards,

Satya.M

3 REPLIES

Re: Redundant link via VPN

Hi there,

Would it be a good idea to use GRE over IPSEC for this solution - you could then run a dynamic routing protocol over the VPN and have this automatically install the correct route in the routing table when the primary goes down.


I am not an expert at this, but it may be worth looking into,

Many thanks

Jonathan

New Member

Re: Redundant link via VPN

Why Can't we configure this for automatic routing between our leased line and VPN links?

A End in 4506

ip route 10.54.0.0 255.255.0.0 10.0.0.101 1

ip route 10.54.0.0 255.255.0.0 firewall 2

B End in 3560

ip route 10.126.0.0 255.255.0.0 10.0.0.102 1

ip route 10.126.0.0 255.255.0.0  firewall 2

Please suggest......

Thanks

Satya.M

Cisco Employee

Re: Redundant link via VPN

You can use either option, dynamic routing over GRE over IPSec or the static routes you listed.  The dynamic routing option is more... dynamic   If you want to keep it simple, you can use your suggestion where the 4500's in the diagram have a primary static route across the intranet link and a floating static route pointing to the ASA.  As long the ASA is setup to send this traffic over the backup VPN, you're set.

Kathy

212
Views
0
Helpful
3
Replies
CreatePlease login to create content