Solved

Site-to-Site VPN Load Balancing with Cisco

Posted on 2010-08-27
4
1,514 Views
Last Modified: 2012-05-10
What I am wondering about is if there is a way to load balance 2 VPN tunnels as one..  The picture below shows my situation... I have a site with 1 ISP that has a 2821 router, and a 2nd site with 2 different ISPs with a cisco 1841 router.  I am wondering if I can establish 2 seperate tunnels between the devices, and then somehow loadbalance traffic over the 2 seperate tunnels?  The reason I want to set this up is because the ISP3 in the picture below is much better than ISP1 and 2 and we are maxed out with ISP1 and 2 as far as bandwidth goes.

I am not interested in purchasing a seperate piece of equipment to handle the VPN load balancing... Just wondering if it is possible with the Ciscos we have?

 Example Picture
If that does not work out, then I am planning on establishing the 2 VPN tunnels, and sending some of our traffic through 1 tunnel, and the rest through the 2nd tunnel..  If you know of any problems with that type of setup, please feel free to let me know..

Appreciate any help you can provide!

Thanks!
0
Comment
Question by:cathchar
  • 2
  • 2
4 Comments
 
LVL 9

Accepted Solution

by:
ffleisma earned 500 total points
ID: 33544299
you can setup an GRE over ipsec instead of the normal l2l ipsec. the difference is that GRE over ipsec can carry routed protocols over the ipsec, effectively you would then be able to setup a routing protocol between the sites. OSPF and EIGRP are two routing protocols that enables load balancing.

with just an l2l ipsec VPN, i don't think you could load balance but you can have the setup fail-over for redundancy.

hope this helps :-)
0
 

Author Comment

by:cathchar
ID: 33544359
I've heard of GRE,,, but not too familiar with it... If anyone has any links about configuring GRE over IPSEC on ciscos, I'd be thankful for your post..

I definately need the encryption, so GRE over IPSEC sounds great...

Thanks ffleisma,,,  keep the info coming if you got it guys.,.. Appreciate it!
0
 
LVL 9

Expert Comment

by:ffleisma
ID: 33544410
0
 

Author Closing Comment

by:cathchar
ID: 33558779
Great info.. Exactly what I am looking for.  Thanks!
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

OpenVPN is a great open source VPN server that is capable of providing quick and easy VPN access to your network on the cheap.  By default the software is configured to allow open access to your network.  But what if you want to restrict users to on…
I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

837 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question