configure automatic switchover from primary to backup tunnel
Hi All,
Some one pl suggest.
The scenario is ,we want to configure a backup link to our main branch which is connected to US & we are having dedicated primary link to it & whenever the primary link goes down.Then, we will initiate the backup tunnel from the firewall.
We want to configure automatic switchover from primary to backup tunnel
Software/Hardware used:
Software/Hardware used:
ASKED:
July 8, 2009 8:11 AM
UPDATED:
July 8, 2009 2:51 PM
Answer Wiki:
If you create a scenario like this, you can perform the automatic failover:
<pre>
+------------+
| |
IF 1 / --- --- IF 2
/| |Lo1| |Lo2||\
/ | --- --- |
// +------------+
/ \
/
+----/----+ +--------+
| | | |
| | | |
+----+----+ +----+----+
| |
| |
| |
| ISP | ISP
| 1 | 2
| |
| |
| |
| |
+----+----+ +----+----+
| | | |
| | | |
+--------+ +-----/---+
/
/
/
/
/
+------------+ /
| |/
--- --- /
IF 1| |Lo1| |Lo2||IF 2
| --- --- |
+------------+
</pre>
Build your VPN tunnels from IF1 to IF1 and IF2 to IF2
Then build GRE tunnels from Lo1 to Lo1 and Lo2 to Lo2 (GRE for Lo1 routed over VPN for IF1 / GRE for Lo2 routed over VPN for IF2)
give a higher routing metric to your secondary route than that of your primary route. If your primary route goes down, your secondary will automatically take over.
This is the easiest solution - If this doesn't work, there are other solutions (if you are in a cisco environment) - but they are more complex.
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
