04-15-2024 10:38 PM
Hi, we have a WAN and VSAT connection to one of the site. WAN is primary and VSAT is secondary link.
We have dedicated router for WAN and VSAT. VSAT link is connected to one of the LAN access switch.
Could you please help me, what kind of configuration I should apply to achieve the redundancy, via having gateway same at all the time?
Solved! Go to Solution.
04-25-2024 11:17 AM
Friend dont waste your time
The endpoint must have one GW and you need hsrp or vrrp (i prefer hsrp)
This direct traffic to core or to vsat
Then if traffic reach core you can use also hsrp (that why I mention it tree) to forward traffic to one of edge routers
MHM
04-15-2024 11:48 PM
I suggest that you need to tweak the setup - Either you need have connection to VSAT router to core switch,
Then on core switch you can use EEM and IPSLA to track the all the WAN1 and 2, if both Fail then change the route to VSAT Router. (this high level you can do)
other side, untl we see high level config of all device its hard to say how that logic going work ?
how are you doing WAN Link failover now (since you have already 2 WAN Routers?)
04-16-2024 12:54 AM
This setup is not running as of now and in design phase.
I agree with your setup for connection to core switch from VSAT router.
Can we have direct connection VSAT router to WAN router to make this work as all routing is taking place in WAN router only? What kind of config I should do in this case?
04-16-2024 01:31 AM
I dont know but maybe you can use tree of hsrp
Firsr hsrp between VSAT and Core
Second hsrp is betwwen edge router connect to Core
This way the enpoint connect to Access SW will forward traffic toward VIP of HSRP and Core will forward traffic to HSRP VIP of edge routers
MHM
04-16-2024 11:42 PM
Need some clarification
1. do you have 2 WAN links connected to 2 WAN Router.
2. For each administration and isolation, i would suggested personally connect VSAT router directly to CORE Switch.
3. Do you have any NAT running WAN router ?
4. what kind of security you have between these site to HQ ? run any IPSEC ?
04-23-2024 11:26 PM
1) Yes, 2 dedicated WAN link for 2 routers. primary and secondary.
2) I agree to connect the VSAT router directly to core switch. In this case, What kind of configuration, I should apply on network equipment's?
3) Since WAN connection is directly from the HQ, I think we dont need NAT at this site, shall be considered as remote site.
4) Shall be IPSEC.
04-24-2024 08:30 AM
what is exiting arrangement of the config ? can you provide the sample configuraiton ?
Do you have IPSEC on the exiting WAN Routers ?
are you looking WAN1 Fail and WAN2 fail then VSAT link to be active path right ?
1) Yes, 2 dedicated WAN link for 2 routers. primary and secondary.
You mentioned there are already primary seconday means some logic already in place ? how is that configuraiton looks like ?
04-24-2024 07:51 PM
Hi,
are you looking WAN1 Fail and WAN2 fail then VSAT link to be active path right ?
yes, WAN 1 Primary, WAN 2 Secondary and VSAT link in 3rd priority.
For all other questions, this solution is in design phase so we dont have the sample config to share. I am looking to have the best options, what shall be configured? Sorry for the inconvenience here
04-25-2024 11:04 AM
If this still in design stage then choosing the right hardware is the key role to make the solution work.
if you are not sure, then i suggest to engage cisco partner or consultant design and deploy for you , choosing the right BOM
Look some example lab config posted on the blog :
04-25-2024 11:17 AM
Friend dont waste your time
The endpoint must have one GW and you need hsrp or vrrp (i prefer hsrp)
This direct traffic to core or to vsat
Then if traffic reach core you can use also hsrp (that why I mention it tree) to forward traffic to one of edge routers
MHM
04-18-2024 12:10 AM
Hello
Can you elaborate on your current network topology.
04-23-2024 11:20 PM
This design is under the documentation phase. Before I document this solution, I wanted to be sure what is feasible and what best can work here so no config or setup is available as of now. Could you please let me know what is the best way to work the solution with 2 WAN router and 1 VSAT connection?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide