How to configure VPN for Failover on cisco Router?

[rechard_david]

Dear All,

Could you let me know how to configure VPN connection with failover on cisco Router 1841?

Please kindly see in the attach file !

Best Regards,

Rechard

[Kasiraman S]

Hello Rechard,

It is very common for IPsec VPN endpoint to have multiple interfaces available for IPsec configuration. One way to achive this by running Routing protocol between sites and if one link(Primary WAN1) fails and its now begin to re-route the traffic over the redundant link (Secondary WAN2). This is very easy method and the configuration is very simple.

Above method provides unbalanced routed path and you can tune the Routing protocol and you can achieve Balanced routing path, i.e Routing the traffic accross both the links.

Please rate if this helps.

Thanks,

Kasi.

[rechard_david]

Dear Kasi,

Could you let me know sample configuration failover for VPN on Cisco router?

I try to do already not but it is working only one wan1.

Best Regards,

Rechard

[David Salazar]

hi, david.

You can use a Tunnel GRE with protection of IPSec. the GRE tunnel will be up regardless of any link.

or you can use VTI.

anyway, I highly recommend you review the following documentation:

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/VPNLoad/VPN_Load.html

V3PN Redundancy and Load Sharing Design Guide

since your topology has 2 serial links, I found the following very interesting article that fits your reality:

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/VPNLoad/ch10_Mul_external_docbase_0900e4b180ac09c7_4container_external_docbase_0900e4b180ace543.html

MLPPP have personally used and is an excellent technology, I think the only limitation is that both links reach the same device (if a router chassis type, must reach the same card or module) and both links should have the same bandwidth.

HTH

David Salazar

El mensaje fue editado por: David Salazar

[rechard_david]

Dear David,

Do you have sample configuration on two wan VPN?

Best Regards,

[rechard_david]

Dear All Expert,

Do you have any idea on this case?

If you have any idea please help me!!

Best Regards,

rechard