Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Routing Protocols 101 2

Status
Not open for further replies.

rpast

MIS
Sep 3, 2002
87
US
Hello all,

I’m sure you’ve heard this one before – but my searches aren’t coming up with anything. It’s a basic question that I’d like to be sure about before going further -- certainly would appreciate any help.

I’m trying to design a failover scheme for a site-to-site vpn in the simplest way – i.e. using an interior routing protocol on the gateway router, instead of BGP, if possible. The basic question is about how interior routing protocols work. I know that they will advertise directly connected subnets. The question is, what determines whether that subnet has ‘failed’?

To illustrate the problem, if I have stub networks at SiteA and SiteB connected over a WAN, both configured for EIGRP, and the network 172.16.30.0 out E0 on SiteB has only one PC connected to it, what will make EIGRP at SiteB conclude that 172.16.30.0 has failed? Must it be the E0 interface itself that has failed? Or can it be the Ethernet cable or NIC on the connected PC?

My guess is that only a malfunction of the router’s E0 interface will cause EIGRP to conclude that the subnet is ‘down’. Because even if the cable and connected PC NIC fails, the router E0 address itself is still in the subnet. So technically, the subnet can still be reached, and EIGRP will advertise this. But I’m not sure.

If the above is true, then my plan to use EIGRP, etc. on the gateway router is foiled. My hope has been to perhaps avoid getting the ISP routers involved at all – instead, just have our own gateway router (terminating a T1, etc.) advertise to others on the inside that it’s directly connected link to the ISP is down, not necessarily because its interface has gone bad, but also when something at the ISP side has gone down. Then, with this information, another interior router can use a floating static route, etc. to direct traffic to a failover Internet link.

Is this off the wall, or is something like BGP the only answer? Thank you very much for any help you can provide.
 
Just remember AnotherTechie that GRE tunnels are NOT encrypted by any means. It only encapsulates traffic with new packet headers. I personally would use it by itself only to pass my routing protocols wherever necessary...
 
By the way, I doubt if BGP would be a usable solution for your scenario from a technical point of view alone.

Even if your routers could somehow handle the stress of this protocol (800 series DSL class routers? Forget about it!), I would have to seriously doubt that your DSL providers would even support BGP. You would need AT LEAST a /24 block and a registered AS# anyway to advertise....
 
Yes, BGP is out of our budget.

Re: the GRE, everything will go over the tunnels, but the idea is to have IPSEC encrypt it at the next hop. Again, this is new to me -- there will be glitches I'm sure.

Maybe a combination of GRE tunnels and those first thoughts about an IGP on the edge router might have had possibilities for providing ISP and VPN redundancy without using BGP; but deadlines are staring me in the face. I’ll let the ISPs provide their own routers, and give GRE a shot. ISP failover will be manual.

Thanks to you and everyone, for your contributions.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top