topic Re: Backup Solution for VPN Connection (using ISDN) in Network Security

Backup Solution for VPN Connection (using ISDN)

jsteffensen — Fri, 21 Feb 2020 05:48:07 GMT

We use a VPN Connection between two sites, A=10.1.x.x and B=10.2.x.x., using 2 Pix'es.

The VPN connection works perfectly, well it works perfectly 80% of the time.....

Our different Serviceproviders have some time problems to deliver connection between our sites, and this makes the VPN connection break down some times.

And now we are searching for a BACKUP-Solution for the VPN connection.

We have desided to use ISDN.

By plasing a Router in front (LAN) of the Pix as the Default Gateway for the LAN, we have been thinking that it could use a Routing protocol to detect when the VPN fails, and use the ISDN as the "backup"-connection to the oter site.

It would then look something like this:

LANA - R - Pix ------ VPN ---- Pix - R - LANB

.............\_________ISND________/.........

Primary connection from A to B is the VPN, but if no Routing updates are recieved from the Router on Network B to the Router on LANA, the Router on LANA should use the ISDN connection as Route to LANB.

It cannot be impossible, but does anyone know how?

Or have any Ideas? Brainstorming?

Best Regard

Jarle

Re: Backup Solution for VPN Connection (using ISDN)

kstaniek — Thu, 07 Jun 2001 19:25:29 GMT

You can try to establish GRE tunnel between routers throught the VPN connection and configure some routing protocol runing on it. When the tunnel will be broken the ISDN backup could be initiated

Re: Backup Solution for VPN Connection (using ISDN)

m.luethi — Fri, 02 Nov 2001 15:47:51 GMT

Jarle, have you found a solution? I'm planning on doing exactly the same VPN backup over ISDN.

Thanks for any input!

Martin

Re: Backup Solution for VPN Connection (using ISDN)

MBILA — Fri, 16 Nov 2001 17:29:30 GMT

Have you found a solution for this. I am trying to do the same thing?

Re: Backup Solution for VPN Connection (using ISDN)

MBILA — Tue, 20 Nov 2001 13:35:33 GMT

Can you run OSPF on the ethernet ports at both ends of the VPN. Assign IP addresses with the neighbors statement. Because broadcasts will not work. Then use floating static routes for the ISDN.

This is what I will be attempting, I think. What do you think?

Re: Backup Solution for VPN Connection (using ISDN)

cjacinto — Sun, 02 Dec 2001 03:53:02 GMT

Be best to run gre on both routers behind the PIX and run some routing protocols over it, say OSPF.

You could then assign a higher metric to the ISDN link, but if route to the GRE tunnel is down (as a consequence of the VPN tunnel being down) then DDR on the ISDN would kick in.

Re: Backup Solution for VPN Connection (using ISDN)

wbutcher — Tue, 14 May 2002 14:28:43 GMT

Hi Jarle,

Did you get a response to your question? We are about to undertake a project to test ISDN backup to a VPN and any information or resolutions you have would be very useful.

Cheers

Warren

Re: Backup Solution for VPN Connection (using ISDN)

jsteffensen — Wed, 15 May 2002 07:25:55 GMT

Hi Warren

No I am sorry, I have only some few "notifications" regarding this problem and a possible "workaround":

-Define a GRE tunnel between two routers.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/inter_c/icdlogin.htm#xtocid292793

Since we can live with the problem, we have not invested more in to solving it..........

(If you are able to solve it, i would be grateful for a feedback.....)

Greetings

Jarle

Re: Backup Solution for VPN Connection (using ISDN)

yusuff — Mon, 17 Jun 2002 09:42:46 GMT

Here is a document i wrote, might help

Configuring IPSec Redundancy over ISDN

http://www.cisco.com/warp/public/707/ipsec_dialerwatch.html

HTH

R/Yusuf