2013年7月3日星期三

Need to use both links at same time for site-to-site vpn


Question:

i'm having some cofussion WS-C3750X-12S-S Price that i have 2 internet connections and i want to use them as ACTIVE & STANDBY or both can load share at the same time with site to site vpn configuration  

if i configure gateway of vlans on multilayer switch then how can i configure HSRP or if i do PBR then how it can be???????????             
     
Devices:

cisco 881 router with 5mbps link
cisco 837 router with 2mbps link
cisco 3560x multilayer switch


Answer:

Here is simple config for VPN backup on Head office:

crypto ipsec transform-set XX esp-3des esp-sha-hmac

crypto map MAP-A 100 ipsec-isakmp
set peer 2.2.2.2
set peer 1.1.1.1
set transform-set XX
match address vpn-to-branch

And on Branch you could configure HSRP on routers for failover.

Hope it WS-C3750V2-48PS-S will help.

没有评论:

发表评论