Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Redundant link via VPN

Dear Team,

we have a problem in routing  between primary and secondary links.

we have a two office and we are connected with intranet 2 Mb and we have configured back-up Site-Site VPN on firewall for remote office.

Now the problem is when the primary is down, we have to change the routing to the secondary. this takes downtime and create much problem.

.So please help to configutre with out any manual support for changing the routing.

Please find the attached network dig.





Re: Redundant link via VPN

Hi there,

Would it be a good idea to use GRE over IPSEC for this solution - you could then run a dynamic routing protocol over the VPN and have this automatically install the correct route in the routing table when the primary goes down.

I am not an expert at this, but it may be worth looking into,

Many thanks


New Member

Re: Redundant link via VPN

Why Can't we configure this for automatic routing between our leased line and VPN links?

A End in 4506

ip route 1

ip route firewall 2

B End in 3560

ip route 1

ip route  firewall 2

Please suggest......



Cisco Employee

Re: Redundant link via VPN

You can use either option, dynamic routing over GRE over IPSec or the static routes you listed.  The dynamic routing option is more... dynamic   If you want to keep it simple, you can use your suggestion where the 4500's in the diagram have a primary static route across the intranet link and a floating static route pointing to the ASA.  As long the ASA is setup to send this traffic over the backup VPN, you're set.


CreatePlease login to create content