cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
389
Views
0
Helpful
1
Replies

MPLS with IPsec backup

vicky.dhas
Level 1
Level 1

HI,

I would like to know How can we configure MPLS with IPsec backup.Both links to be terminated on the  same router.Both should work in Active-Active mode but whenever MPLS link fails , traffic to be switched over to Internet link.

Awaiting your suggestions.

regards

1 Reply 1

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello Vicky,

for a scenario like this I recommend to use a point-to-point GRE tunnel that will be protected by IPsec, this allows you to have a logical link, the GRE tunnel, over which you can run a routing  protocol, multicast traffic and even MPLS if needed.

To make it the secondary path it will be enough to increase metric over it.

Depending on what routing protocol you use on primary link different choices are possible for the protocol to be used over the GRE tunnel

if you use eBGP on primary  path any IGP can be used on secondary path with only care to avoid to have more specific routes over it.

A possible choice can be EIGRP that allows to summarize out an interface or OSPF

see

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009438e.shtml

Hope to help

Giuseppe

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco

Ā