Solved

Enterprise Routers and VPN

Posted on 2014-02-05
6
226 Views
Last Modified: 2014-02-05
Hey guys

I need some shopping help here.  A customer wants to setup his three remote sites to have not only failover to an alternate ISP (which is easy) but also to have Auto Failover of his THREE VPN's.  I have seen a lot of routers but none really work very good on the VPN Auto Failover.  

Any ideas out there?
0
Comment
Question by:jonmenefee
  • 3
  • 3
6 Comments
 
LVL 22

Expert Comment

by:Matt V
Comment Utility
What kind of VPNs are you talking about?  To other remote offices, "dial-in" remote worker VPNs or to third party partners and vendors?

If you are talking about the first two, then the configuration of the router determines more than which router you choose.

The third is an issue because the third party has to do some configuration on their end to support the connection from both ISPs.
0
 

Author Comment

by:jonmenefee
Comment Utility
Three offices, Gateway to Gateway VPN is the preferred way.  IPsec VPN

Example.

Office A has the main server in it.  It has ATT and Comcast.  Their uptime is good.

Office B has Comcast and ATT also, but they are constantly having issues and Comcast goes offline more than online

Office C has Comcast and ATT also, but they don't have any problems.

B and C connect to A via Gateway VPN.  I need to make sure that if B goes down that its VPN will failover and reconnect to A with no end user intervention.

Thanks!!
0
 
LVL 22

Accepted Solution

by:
Matt V earned 500 total points
Comment Utility
If you are using Cisco routers, you can setup a DMVPN and use OSPF or EIGRP routing and the tunnels will failover nicely.

Basically each spoke site connects to a tunnel over each ISP, and then traffic will route over both, but continue to route if one goes down.

This is a really easy way to accomplish what you need.  There are other ways as well.

If you want to make sure the traffic goes over Comcast before ATT then you can weight the routes so that one gets traffic before the other.
0
Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

 

Author Comment

by:jonmenefee
Comment Utility
Thanks, that does help a whole lot.
0
 
LVL 22

Expert Comment

by:Matt V
Comment Utility
We did something similar but had two main offices with a fibre across the parking lot, so we set each spoke to connect to each head office, in case one lost Internet.

We used a Cisco 1921 for the hub (main office) and Cisco 881 routers at the remote locations.
0
 

Author Comment

by:jonmenefee
Comment Utility
Thanks Matt!!
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

In a WLAN, anything you broadcast over the air can be intercepted.  By default a wireless network is wide open to all until security is configured. Even when security is configured information can still be intercepted! It is very important that you …
New Server 172.16.200.2  was moved from behind Router R2 f0/1 to behind router R1 int f/01 and has now address 172.16.100.2. But we want users still to be able to connected to it by old IP. How to do it ? We can used destination NAT (DNAT).  In DNAT…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now