Solved

vpn site to site redundancy

Posted on 2013-05-24
5
525 Views
Last Modified: 2013-05-26
Experts,

Trying to understand if it is possible to have two ISP to have a redundancy on a VPN site-to-site connection? If so, what are the technology to be use and hardware components?


Cheers!
0
Comment
Question by:gsmith888
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 18

Accepted Solution

by:
xtermie earned 200 total points
ID: 39193843
An interesting case is presented here:
http://networkology.net/2013/03/08/site-to-site-vpn-with-dual-isp-for-backup-redundancy/

while an interesting discussion about the same issue here:
https://supportforums.cisco.com/thread/2086955

and an answer to a similar question to yours here:
http://forums.juniper.net/t5/SRX-Services-Gateway/Question-about-site-to-site-vpn-with-two-ISP-on-every-site/td-p/127689

Hope these will help you out!
0
 
LVL 3

Assisted Solution

by:corower
corower earned 150 total points
ID: 39193944
simple answer is "yes, it is possible".
basically, to have full redundancy, both VPN endpoints should have two connections, and then you might use some kind of bonding to get that required level of redundancy (and, probably higher throughput). there definately is a solution for unix boxes (althou, you will need some handwork configuring). if you want to have something like pre-configured appliance, look for Mushroom Networks solutions, maybe something will fit you.

if you're tight with budget - look for MikroTik (either hardware or just software), in their manual there is a described solution exactly for creating several VPNs using two (or more) ISPs for redundancy.
0
 
LVL 3

Expert Comment

by:CITG_Carl
ID: 39194134
What are your current VPN endpoints? Are you using firewalls either side or just routers?
0
 

Author Comment

by:gsmith888
ID: 39194160
firewalls on my side and for the other side different flavors as they are partners
0
 
LVL 3

Assisted Solution

by:CITG_Carl
CITG_Carl earned 150 total points
ID: 39194167
Obviously the first step is having either two routers at your spoke, or a device that can handle multiple internet lines.

Sonicwall has VPN settings which can detect a drop on a line, and migrate rules/vpns to the backup line. You would need the spoke endpoint sat ready to accept this connection mind

Cheers
0

Featured Post

Business Impact of IT Communications

What are the business impacts of how well businesses communicate during an IT incident? Targeting, speed, and transparency all matter. Find out more in this infographic.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In the hope of saving someone else's sanity... About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question