On Thu, 26 May 2011, Scott Voll wrote:
I have a Metro Ethernet connection to all my sites but they are all hub and
spoke. if I lose a link that site goes down.
I have basic ISP service available at each of my remote sites and would like
to setup a backup link over a VPN connection. I talked to someone, and I
can't remember what they said. I thought about ASA's but they said using a
router with VPN service was a better option. Can anyone tell me what they
were talking about? they said with the routers you have better options for
Routing.
Use gre tunnels + bgp routing + ipsec if you need crypto
Dynamic routing is needed for proper failover, the ASAs will not handle
this well at all due to their inability to route packets or handle gre
tunnels or basically do anything that an actual router can do.
If you have routers in place that dont have the horsepower or feature
set to do crypto, you can use ASAs to ipsec tunnel the gre tunnel but its
much cleaner to be able to use the crypto map right on the tunnel
interface on your router.
cisco 1941s work well for this.
TIA
Scott
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
--
This message has been scanned for viruses and
dangerous content by the ipengines.net MailScanner, and is
believed to be clean.
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
