Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Backup routing using Cisco 3550

Posted on 2004-10-06
5
Medium Priority
?
205 Views
Last Modified: 2010-04-12
I have a Cisco 3550 EMI switch which is the default gateway of my all hosts in my LAN. I have a point-to-point link to a client site which terminates on a Cisco 2610 router and the router is connected to the 3550. I have a Cisco PIX firewall from where I have a VPN to the same client site. The trusted interface of the PIX terminates on the 3550 as well.

Now I want that when the point-to-point link goes down ... all traffic should automatically be routed through the VPN. Please let me know the configuration that should be done in the switch to achieve this.

Regards,
Anindya.
0
Comment
Question by:mitra_am
  • 3
3 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 12236273
You need some type of dynamic routing taking place between the router and the 3550 so that if the router's WAN interface drops, it will notify the 3550..

Something like this:

2610:
 ip route 0.0.0.0 0.0.0.0 <upstream ip>
  router ospf 222
   network 192.168.122.0 0.0.0.255 area 0  <== subnet of Ethernet 0/0
   default-information originate

3550:
  router ospf 222
   network 192.168.122.0 0.0.0.255 area 0
  ip route 0.0.0.0 0.0.0.0 <ip of PIX> 120  <== metric higher than the 110 from ospf

0
 
LVL 79

Expert Comment

by:lrmoore
ID: 12236290
Assuming you can get the router at the other end of the point-to-point to participate in ospf, that would be better. As a matter of fact, even the PIX FW can participate in ospf.

Your issue may be that even though your side works, the other side might not. You'll have to get all peices involved together with one plan.
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 13737566
Do you need any more assistance or information?
Can you close out this long-forgotten question?
Here's how:
http://www.experts-exchange.com/help.jsp#hs5

Thanks!
<8-}
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Juniper VPN devices are a popular alternative to using Cisco products. Last year I needed to set up an international site-to-site VPN over the Internet, but the client had high security requirements -- FIPS 140. What and Why of FIPS 140 Federa…
Some of you may have heard that SonicWALL has finally released an app for iOS devices giving us long awaited connectivity for our iPhone's, iPod's, and iPad's. This guide is just a quick rundown on how to get up and running quickly using the app. …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

782 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question