Solved

Route VPN connection during DR site failover

Posted on 2013-05-16
5
611 Views
Last Modified: 2013-05-22
Currently we have a few clients that we have a site to site vpn connection with to our data center.  We are in the process of adding a DR site in the event our primary data center fails.  My question is "how can I get the site to site connections to connect to the DR site?"    If we fail to the DR site the IP obviously changes and the connection is not valid.  How does the client recognize that traffic needs to go through a new vpn connection?
0
Comment
Question by:NytroZ
5 Comments
 
LVL 28

Expert Comment

by:asavener
ID: 39171910
If they're using Cisco IOS-based devices, you can just add a second peer address to the crypto map.  If the first peer is unavailable, the VPN will switch to the second peer.

In our testing, it took about 30 seconds to detect the failure and switch to the new peer.
0
 
LVL 10

Accepted Solution

by:
convergint earned 500 total points
ID: 39171926
Does your DR site have an internet connection or is it only connected to your main data center?  If it does have it's own connection and assuming you have a capable VPN router, just add a secondary gateway to the VPN that points to your DR site.

If it is only connected to your primary site, then you will need to add it's subnet to the VPN network routes.  Again it depends on what VPN routers you are using.  We are using Sonicwalls and they have a lot of capability for additional routes on VPNs and two gateways.
0
 

Author Comment

by:NytroZ
ID: 39172027
So if I understand correctly, the client needs to add the a second entry into the VPN connection for the IP address of the DR site endpoint.  If our primary IP address is unavailable the second IP address(DR site IP) will negotiate the connection?  The DR site has its own connection.
0
 
LVL 28

Expert Comment

by:asavener
ID: 39172401
Yes.  The DR will need its own router/VPN device, which will need to be configured to accept the VPN connections.
0
 
LVL 20

Expert Comment

by:rauenpc
ID: 39174700
Depending on how things are setup, you will also need to look at how to handle routing failover. It's one thing to have the VPN end points failover, but it can sometimes be a challenge to get traffic to route to the correct firewall when the firewall is up and running but the internet connection is down. Everything depends on how routing is currently setup.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Eigrp Router 5 48
Site-to-Site VPN Cisco ASA 5505 to Cisco RV320 4 32
how to access my server 9 28
Office 365 vs. In-House 4 35
I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now