Solved

Router to PIX VPN failover over DSL

Posted on 2008-10-22
2
367 Views
Last Modified: 2012-06-27
Hello.

I have 2 sites. Site A is connected to the internet via an E1 and Site B which is also connected to the internet via an E1.
I am currently running an IPSEC vpn tunnel between a PIX 515E at site A and a Cisco 2610 at site B.

I have been having problems with the E1 provided to site B and want to be able to create a backup VPN over DSL should I have further issues.

I have a WIC card within the 2610 at site B. This is connected to DSL and has a Fixed IP address.
The failover will need to be from the PIX at site A to the DSL connection at site B.

I seem to be having problems setting this up so any help would be very much appreciated!

Thanks guys,

Scott259
0
Comment
Question by:scott259
2 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 22791748
If you just setup the PIX to look like there are two different peers for the same traffic, it will use the one with the lowest priority number and the next one if necessary:

Something like this:

rypto map outside_map 10 match address outside_1_cryptomap
crypto map outside_map 10 set peer <T1 ip address>
crypto map outside_map 10 set transform-set ESP-3DES-MD5
rypto map outside_map 20 match address outside_1_cryptomap
crypto map outside_map 20 set peer <DSL ip address>
crypto map outside_map 20 set transform-set ESP-3DES-MD5
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

25 Experts available now in Live!

Get 1:1 Help Now