Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Cisco > OSPF and IPSec tunnel "priority"

Thread Tools

OSPF and IPSec tunnel "priority"

cristi27 cristi27 is offline
Junior Member
Join Date: Sep 2006
Posts: 4
I have some lab tests and I need some advices

What I have:
- 3 (R1, R2 and R3) Routers (831) connected through an 3750 switch (no ip routing here).
- all 3 routers run OSPF
- R3 has 2 GRE Tunnels using IPSec, one tunnel with R1 an one tunnel with R2
- R3 has a LAN connection attached.
What I want:
- I want that Tu1 to be the main tunnel used to transport traffic from client's LAN to R1 (and from here to VPN concentrator, but that is another problem so ignore it ).
- When R1 goes down, I want that traffic from client's LAN to be switched to R2 via Tu2 (the "backup" tunnel).

So, the big question is:
- How can I do the IPSec tunnel "priority" thing? , so that as long as R1 it's up the traffic from client's LAN to go to R1 via Tu1, and when R1 is down the traffic be swiched to R2 via Tu2...
I've attached also a network diagram ...
Attached Images
File Type: jpg IPSec Tunneling_ENG.jpg (132.8 KB, 1 views)
Reply With Quote
cristi27 cristi27 is offline
Junior Member
Join Date: Sep 2006
Posts: 4
Right now the OSPF is configured betwheen 172.16.x.y/24 IP's. Should I use Tunnel's IP in OSPF insted and asign different costs to Et1 interfaces of R1 and R3?
Reply With Quote

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
basic/weird ospf question- ospf gurus need help!!! Cisco 4 12-13-2007 05:22 PM
One IPsec tunnel and no ISAKMP tunnel. AM Cisco 7 07-19-2007 03:11 PM
Split Tunnel Blocks http through tunnel but passes http around tunnel a.nonny mouse Cisco 2 09-19-2004 12:10 AM
Redistribute static to OSPF, overriding the slower OSPF-native route? E.Finlayson Cisco 0 09-10-2004 02:13 PM
Termination of an IPSec VPN tunnel and a GRE Tunnel on one physical interface. John Ireland Cisco 1 11-11-2003 04:47 PM