Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Enterprise Routers and VPN

Posted on 2014-02-05
6
232 Views
Last Modified: 2014-02-05
Hey guys

I need some shopping help here.  A customer wants to setup his three remote sites to have not only failover to an alternate ISP (which is easy) but also to have Auto Failover of his THREE VPN's.  I have seen a lot of routers but none really work very good on the VPN Auto Failover.  

Any ideas out there?
0
Comment
Question by:jonmenefee
  • 3
  • 3
6 Comments
 
LVL 22

Expert Comment

by:Matt V
ID: 39836317
What kind of VPNs are you talking about?  To other remote offices, "dial-in" remote worker VPNs or to third party partners and vendors?

If you are talking about the first two, then the configuration of the router determines more than which router you choose.

The third is an issue because the third party has to do some configuration on their end to support the connection from both ISPs.
0
 

Author Comment

by:jonmenefee
ID: 39836415
Three offices, Gateway to Gateway VPN is the preferred way.  IPsec VPN

Example.

Office A has the main server in it.  It has ATT and Comcast.  Their uptime is good.

Office B has Comcast and ATT also, but they are constantly having issues and Comcast goes offline more than online

Office C has Comcast and ATT also, but they don't have any problems.

B and C connect to A via Gateway VPN.  I need to make sure that if B goes down that its VPN will failover and reconnect to A with no end user intervention.

Thanks!!
0
 
LVL 22

Accepted Solution

by:
Matt V earned 500 total points
ID: 39836462
If you are using Cisco routers, you can setup a DMVPN and use OSPF or EIGRP routing and the tunnels will failover nicely.

Basically each spoke site connects to a tunnel over each ISP, and then traffic will route over both, but continue to route if one goes down.

This is a really easy way to accomplish what you need.  There are other ways as well.

If you want to make sure the traffic goes over Comcast before ATT then you can weight the routes so that one gets traffic before the other.
0
Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

 

Author Comment

by:jonmenefee
ID: 39836497
Thanks, that does help a whole lot.
0
 
LVL 22

Expert Comment

by:Matt V
ID: 39836574
We did something similar but had two main offices with a fibre across the parking lot, so we set each spoke to connect to each head office, in case one lost Internet.

We used a Cisco 1921 for the hub (main office) and Cisco 881 routers at the remote locations.
0
 

Author Comment

by:jonmenefee
ID: 39837442
Thanks Matt!!
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Building small business network 4 91
Fortigate 100D NTP Issue 4 107
configure ASA Vlan Interface 14 72
Local DNS and Home Routers 4 46
New Server 172.16.200.2  was moved from behind Router R2 f0/1 to behind router R1 int f/01 and has now address 172.16.100.2. But we want users still to be able to connected to it by old IP. How to do it ? We can used destination NAT (DNAT).  In DNAT…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

838 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question