Cisco firewall redundancy

[Andrew Melsom]

Hello All

Hopefully a quick question, we have 2 sites one is a disaster recovery site all our site to site VPN'S go into our DR site what my question is, i would like to set up  something like HSRP, or GLBP so that if we lose out WAN link between the 2  sites the VPN'S will switch over to our other firewall  at our main site, is this posible?

Thanks

Andy

[david.tran · Accepted solution]

You can either GRE/IPSec to take advantage of dynamic routing protocol to switch between main site and DR sites.

The other option is "floating" route.  Ugly but it might work.

[Andrew Melsom]

Thanks, Do you Know the commands i would use for this ?

Thank you


Sent from Cisco Technical Support Android App

[david.tran]

I don't know anything about your network.  It takes more than just "commands" to make it work.  You need to make sure your design is sound and feasible.  Once that is done, we can talk about the steps to implement the design.

Btw, that's what they teach people in college, "critical thinking" and problem solving.