MPLS and backup failover internet site to site VPN

[alan-wong]

Dear

Our company using all cisco router 2901 with MPLS to connect all branch office to headquarter office.  I would like to know if we want to build a backup internet site to site VPN link in case of MPLS failure.  It can automatically failover to Internet site to site VPN if MPLS line is down.  What is the best VPN connection method we can use to suit our need? like

1) site to site IPSEC VPN

2) point to point GRE VPN Tunnels or

3) DMVPN?

Please advise, thank you.

[Marcin Latosiewicz · Accepted solution]

Alan,

If you're looking for typical hub and spoke configuration without need for spoke to spoke direct tunnels you can used DMVPN phase 1 design (point to point tunnels on spokes, mGRE interface on hub) or FlexVPN.

Routing concepts around this are discussed for example here:

https://supportforums.cisco.com/docs/DOC-5748

Depending on routing protocol used...it will work differently.

M.