Point-to-Point failover to vpn 1

[shihlin]

Hi I just want to know if anyone done a failover from Point-to-Point T1 to vpn before. I wonder if I have a Cisco router with VPN accelerate card or Cisco 2800 router install can I setup the router to failover to VPN link (site to site) when the router’s Point-to-Point link goes down. Any suggestions are appreciates.



Many thanks,



SL

 

[KiscoKid]

You should be able to do this but does your router have a backup interface to the T1 (eg ISDN)?

 

[shihlin]

Thanks for promptly reply. Yes, I was thinking about ISDN but I think VPN is cheaper and faster solution compare to ISDN (Bri). Any suggestion on configurations or reference I can find it? Is flooding static route or HSRP will work?

Many thanks,



SL

 

[Jynxx]

We use VPN as a backup to some T1 and frac-T1 Frame links. The T1 comes in to a 2621XM and a 1710 router connected to a DSL circuit with a constant nailed up tunnel for backup.

No reason why the same thing couldn't be done with a single router with 2 "WAN" interfaces.

 

[shihlin]

Thanks for the information. Jynxx, just wonder are you using HSRP for 2621, and 1710? Also should VPN tunnel will remain up even in the backup sitution?

Thanks again,


SL

 

[Jynxx]

We are using HDRP between the 2, yes...so that if the 2621 dies, the 1710 can act as the DFGW.

We leave our VPN tunnels up at all times, because it is not a pay per cost ISDN, etc...just business class DSL in most cases.

 

[quickconnect]

I am looking to do something simular. Currenly we have one of our international sites running a Cisco 1750 router with a VPN tunnel back to our corporate 3060 concentrator. There main link is a frame relay circuit I believe.

Now Currently they have a DSL backup circuit plugged into a PIX 501 as a backup VPN link back to the our Concentrator but that link is currently disables and needs to be enabled manually when the primary link goes down.

We are thinking of replacing the 1750 router with a new Cisco 2801 router in it's place.. Is it possible to have both the the Frame relay circuit running as the primary VPN line and the DSL circuit as the failover backup line connected to the same router. Is anyone doing this and how does this work? How do you have your concentrator configured and what does your config look like on the router for this to work. What protocals do you have running?
Are there 2 tunnles up at the same time or only one at a time or is only one VPN Tunnel up then fails to the second circuit when the primary fails?