Petri.co.il forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Networking > Cisco Security PIX/ASA/VPN
Petri.co.il is happy to award RicklesP the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read
Notices

Failover of MPLS Link over the VPN

Failover of MPLS Link over the VPN

this thread has 3 replies and has been viewed 1640 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 27th April 2012, 08:49
satish.ojha satish.ojha is offline
Casual
Casual
 
 Join Date: May 2011
  6 month star 12 month star
 Posts: 3
 Reputation: satish.ojha is on a distinguished road (10)
Default Failover of MPLS Link over the VPN

Hi All,

I have got an assignment to setup the failover of MPLS link over the vpn link automatically. As of now we have two offices connected with the MPLS link and both the end is having the cisco 801 router provided by the ISP.

I want the MPLS will be always primary and all the traffic must go when he is ok. As soon as it goes down a vpn connection should take over it automatically. And if mpls comes back it must again switch back to MPLS network. We have a normal internet broadband at the both the offices and wish to use for VPN setup. In case if it can not be done automatically even on demand dialup will also ok for us.

As of we have a proprietary firewall which does not support the failover over the vpn. it supports only the wan link failover and we are not in position invest on secondary mpls link.

Kindly suggest the way and devices required at the both ends to setup the same. we approached several vendors but did not get the resolution.

thx
Satish

Last edited by satish.ojha; 27th April 2012 at 08:51.. Reason: correction
  #2  
Old 27th April 2012, 13:16
auglan's Avatar
auglan auglan is offline
Moderator
 
 Join Date: Apr 2010
  6 month star 12 month star
 Location: Raleigh, NC
 Posts: 1,214
 Reputation: auglan has a spectacular aura aboutauglan has a spectacular aura aboutauglan has a spectacular aura about (219)
Default Re: Failover of MPLS Link over the VPN

Can do it with IP SLA and Enhanced object tracking.

Pretty much the ip sla will continuously ping your next hop router in the MPLS network. If those pings fail then the associated static route in the routing table gets removed and a backup static route will be added (Route with higher AD).

Recommend configuring a VTI based Ipsec Vpn if you want multicast/broadcast over the tunnel. If you have more than 3 sites or will in the future then DMVPN will be the best route.
__________________
CCNA, CCNA-Security, CCNP
CCIE Security (In Progress)
  #3  
Old 28th April 2012, 08:21
satish.ojha satish.ojha is offline
Casual
Casual
 
 Join Date: May 2011
  6 month star 12 month star
 Posts: 3
 Reputation: satish.ojha is on a distinguished road (10)
Default Re: Failover of MPLS Link over the VPN

Hi, thanks for your suggestion. will the route add and remove process will be automatically or it has to be done manually.
  #4  
Old 28th April 2012, 15:50
auglan's Avatar
auglan auglan is offline
Moderator
 
 Join Date: Apr 2010
  6 month star 12 month star
 Location: Raleigh, NC
 Posts: 1,214
 Reputation: auglan has a spectacular aura aboutauglan has a spectacular aura aboutauglan has a spectacular aura about (219)
Default Re: Failover of MPLS Link over the VPN

The route being tracked will be removed from the routing table when the IP Sla fails then the route with the higher AD will be added. When the original IP Sla comes back then the reverse will happen.
__________________
CCNA, CCNA-Security, CCNP
CCIE Security (In Progress)
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Failover cluster cannot failover automatically ? Albertwt Windows Server 2008 / 2008 R2 6 17th June 2011 18:18
Dead Link in site article. Link needs to be updated. infitom Suggestions and Feedback 4 6th September 2009 06:21
Web server failover if ISP link goes down frequently ronalds_g General Networking 0 21st January 2009 10:28
MPLS, Modular VPN etc Benjapos General Networking 0 7th October 2007 00:02
MPLS for home lab? theterranaut Cisco Routers & Switches How-to 3 20th November 2006 03:16


All times are GMT +3. The time now is 12:46.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri