cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
477
Views
10
Helpful
4
Replies

Backup for WAN Connections

Patrick McHenry
Level 3
Level 3

Hi,

just starting to think about a backup plan for our remote sites.At present we are using T1s as our backup solution. When our main connection go down the T1s are used and we lose the IP phones and the other traffic just crawls. And to top it off these T1s are very expensive. Our primary WAN connections from the remote sites use 100Mbs circuit into the MPLS cloud using BGP and our main site uses a 1Gbs circuit into the MPLS cloud using BGP.

We were thinking we could get a 50 or 100Mbs Internet connection to each remote site and get a 600Mbs or 1Gbs Internet connection to our main site and create VPNs from the remote site to the main site for our backup solution.

Does anyone have any docs on setting this up or experience with this type of backup solution/best practices? I'd appreciate any opinions/input.

Thank you, Pat

4 Replies 4

Ajay Raj
Level 1
Level 1

Its possible, you can get Internet connection for both the side, then make a tunnel for both the side

Yes, I'm aware that it is possible but, I'm looking for documentation/best practices for such a design.

Thank you. Pat.

mfurnival
Level 4
Level 4

Pat,

It really depends on what you are planning to use at the head office to terminate the VPNs. Are you planning to use a Cisco router or a firewall of some sort?

If you are planning on using a Cisco router then DMVPN ( http://www.cisco.com/en/US/products/ps6658/index.html ) could be a solution that would work for you.

Thank for the response -

The headend will be a 1006 and the branches will be 1002Xs

Not sure if DMVPN is the right fit. I'm looking for a backup link that is always up...as if it were another link with a higher cost. Then, when the Primary link fails the VPN path is used. I could also create IP SLAs so when the Primary path is dropping packets of becomes slow, it could use the VPN path. I would have to create a GRE tunnel for the EIGRP. Not sure what I would gain by using a DMVPN. Correct me if I am wrong but, the benefit of the DMVPN is the dynamic nature of deployment and that it can route through the Internet to other remote sights?

.

Thank you.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco