Enterprise Routers and VPN

Hey guys

I need some shopping help here.  A customer wants to setup his three remote sites to have not only failover to an alternate ISP (which is easy) but also to have Auto Failover of his THREE VPN's.  I have seen a lot of routers but none really work very good on the VPN Auto Failover.  

Any ideas out there?
jonmenefeeAsked:
Who is Participating?
 
Matt VCommented:
If you are using Cisco routers, you can setup a DMVPN and use OSPF or EIGRP routing and the tunnels will failover nicely.

Basically each spoke site connects to a tunnel over each ISP, and then traffic will route over both, but continue to route if one goes down.

This is a really easy way to accomplish what you need.  There are other ways as well.

If you want to make sure the traffic goes over Comcast before ATT then you can weight the routes so that one gets traffic before the other.
0
 
Matt VCommented:
What kind of VPNs are you talking about?  To other remote offices, "dial-in" remote worker VPNs or to third party partners and vendors?

If you are talking about the first two, then the configuration of the router determines more than which router you choose.

The third is an issue because the third party has to do some configuration on their end to support the connection from both ISPs.
0
 
jonmenefeeAuthor Commented:
Three offices, Gateway to Gateway VPN is the preferred way.  IPsec VPN

Example.

Office A has the main server in it.  It has ATT and Comcast.  Their uptime is good.

Office B has Comcast and ATT also, but they are constantly having issues and Comcast goes offline more than online

Office C has Comcast and ATT also, but they don't have any problems.

B and C connect to A via Gateway VPN.  I need to make sure that if B goes down that its VPN will failover and reconnect to A with no end user intervention.

Thanks!!
0
Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
jonmenefeeAuthor Commented:
Thanks, that does help a whole lot.
0
 
Matt VCommented:
We did something similar but had two main offices with a fibre across the parking lot, so we set each spoke to connect to each head office, in case one lost Internet.

We used a Cisco 1921 for the hub (main office) and Cisco 881 routers at the remote locations.
0
 
jonmenefeeAuthor Commented:
Thanks Matt!!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.