topic Re: VPNs in Network Security

VPNs

tperron — Fri, 21 Feb 2020 07:10:03 GMT

EIGRP and VPNs.

We have four tunnels. A connects to our internal network. B, C and D connect to a VPN. We want to load balance EIGRP over each of the four paths. How can we do it?

Also, if A fails we want B, C and D to work. If B, C and D fail we ant A to work.

What solution mix could help? Can we consider using variance, offset lists, other? Please send config samples.

Thanks.

Tom

perronta@hotmail.com

Re: VPNs

smalkeric — Mon, 29 Dec 2003 16:34:13 GMT

You can define multiple remote peers using crypto maps to allow for load sharing. Should a peer fails, there will be an other protected path. If a transmission attempt fails with the first peer, IKE tries the next peer on the crypto list. The crypto map parameters must be compatible with other peers. If you are not sure how to configure the crypto map parameters, use dynamic crypto maps. This is well described at:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113t/113t_3/ipsec.htm#32276

Re: VPNs

gmiiller — Mon, 19 Jan 2004 05:15:33 GMT

I'm currently running OSPF on some MGRE crypto networks, and there's a fair bit on the Cisco web site about those sort of features. As far as load balancing is concerned, my advice would be to use extreme caution as the delay on the VPN will also be affected by crypto performance as well as all the other normal factors, so if you try per-packet things will probably get nasty.