Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Site-to-Site VPN Load Balancing with Cisco

Posted on 2010-08-27
4
Medium Priority
?
1,763 Views
Last Modified: 2012-05-10
What I am wondering about is if there is a way to load balance 2 VPN tunnels as one..  The picture below shows my situation... I have a site with 1 ISP that has a 2821 router, and a 2nd site with 2 different ISPs with a cisco 1841 router.  I am wondering if I can establish 2 seperate tunnels between the devices, and then somehow loadbalance traffic over the 2 seperate tunnels?  The reason I want to set this up is because the ISP3 in the picture below is much better than ISP1 and 2 and we are maxed out with ISP1 and 2 as far as bandwidth goes.

I am not interested in purchasing a seperate piece of equipment to handle the VPN load balancing... Just wondering if it is possible with the Ciscos we have?

 Example Picture
If that does not work out, then I am planning on establishing the 2 VPN tunnels, and sending some of our traffic through 1 tunnel, and the rest through the 2nd tunnel..  If you know of any problems with that type of setup, please feel free to let me know..

Appreciate any help you can provide!

Thanks!
0
Comment
Question by:cathchar
  • 2
  • 2
4 Comments
 
LVL 9

Accepted Solution

by:
ffleisma earned 2000 total points
ID: 33544299
you can setup an GRE over ipsec instead of the normal l2l ipsec. the difference is that GRE over ipsec can carry routed protocols over the ipsec, effectively you would then be able to setup a routing protocol between the sites. OSPF and EIGRP are two routing protocols that enables load balancing.

with just an l2l ipsec VPN, i don't think you could load balance but you can have the setup fail-over for redundancy.

hope this helps :-)
0
 

Author Comment

by:cathchar
ID: 33544359
I've heard of GRE,,, but not too familiar with it... If anyone has any links about configuring GRE over IPSEC on ciscos, I'd be thankful for your post..

I definately need the encryption, so GRE over IPSEC sounds great...

Thanks ffleisma,,,  keep the info coming if you got it guys.,.. Appreciate it!
0
 
LVL 9

Expert Comment

by:ffleisma
ID: 33544410
0
 

Author Closing Comment

by:cathchar
ID: 33558779
Great info.. Exactly what I am looking for.  Thanks!
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
If you use NetMotion Mobility on your PC and plan to upgrade to Windows 10, it may not work unless you take these steps.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

581 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question