VPN tunnels for Failover

[Russell Stamey]

Hello,

I am trying to figure out the best way to setup VPN tunnels to my remote sites. Currently, each site has an Internet connection with a VPN back to the HQ. We are  installing a second Internet circuit at each location.

I have setup tracking statments with SLA to pull routes out when the primary connection goes down, but I am not sure what the best way to build the tunnel for the backup connection.

Basically, I want the tunnel to failover to the backup connection when the primary circuit fails. I also need the primary tunnel to rebuild once the connection reestablishes. There are 8 remote locations total.

Please suggest the best way of implementing this.

Thank You

[david.tran]

If all of your locations use Cisco routers and NOT ASA devices then the solution is a very simple one:

Option #1:  GRE/IPSec

Option #2:  DMVPN

Either option will work like a charm.

[Russell Stamey]

Thanks for the response. I will update this thread when I am able to finish the project.