Best technology to implement failover to remote backup l2l VPN?

[jmaxwellUSAF]

Hello.

TASK: implement technology so that when l2l VPN to vendor fails, EIGRP routing will redirect traffic to distant backup VPN.

Options: BGP config, SLA config, DPD config, (other)

Which option would you implement & why?

Thank you.

[Rob Ingram]

@jmaxwellUSAF no they are independant.

DPD runs periodically to determine the status of the VPN peer, if communication is lost it clears the Security Associations (SA). If RRI is used and there are no SAs, then the remote peer networks are removed from the routing table. RRI installs the routes of the remote peer networks into the routing table only when there is an active VPN.

[jmaxwellUSAF]

Your solution seems simplest = best.

Is there a reason why, to solve this task, someone would prefer the BGP implementation?

[Rob Ingram]

@jmaxwellUSAF you can, I assumed you aren't currently using BGP on your DMVPN, so therefore you'd have a lot of reconfiguration if you want to use BGP. There are several other ways to achieve the samething, I provided suggestions to integrate with your current setup the easiest.