11-29-2017 07:33 AM - edited 11-29-2017 08:02 AM
I have a HA-pair of 3050s in my corp office with an single existing IPSEC tunnel to a remote office on a 200.
The remote office has very poor reliability on it's existing connection and the local ISP has provided them with a backup satcom link they can use when the prime connection goes down.
the HA-pair sits behind a Single IP that's managed via BGP on a HA-pair of routers with redundent internet links. The main IP will float between the routers using HSRP.
If it was only a matter of flipping a route on the remote 200, it wouldn't be an issue, but how do I get the tunnel to migrate from one local IP to another?
Thanks.
12-03-2017 05:11 AM
For this type of setup, I would remove the static route on the VPN tunnel. And setup OSPF on the tunnel interfaces between the remote site and the cluster.
You can then have two VPN active at all times and use OSPF cost on the back link to make sure it is less preferred.
If you are not running OSPF currently on the HA PA, you can import these remote side routes into your BGP setup.
On the remote side set the LAN interfaces there to passive OSPF so that their subnets get advertised up both tunnel neighbors.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
