Re: ipsec ha

what is the actual problem of building two different IPSEC

On Tue, Nov 30, 2010 at 6:07 PM, ehtesham ali <conect2ehtesham_at_gmail.com> wrote:
> hi group,
> we have the following senario r1, and r2 are multihomed to two regional
> isp as shown.
>
> [r1] s0----------------------------------->primary isp A
> [ ] s1----------------------------------->backup isp B
>
> [r2] s0/0-------------------------------> primary isp A
>
> r1 and r2 faces the internet and connect to HQ using IPSEC vpn.
>
> requirements
>
> 1)
> *the primary ipsec tunnel should terminate on R1 s0 interface , *
> **
> *on local interface failure OR when line protocol on s0 is down ,*
> **
> * backup tunnel should be immediately come up on R1 s1 interface connected
> to ispB* .
>
>
> 2) *however when R1 itslef fails IPSEC TUNNEL should terminate on R2 s0
> interface*
> **
> does cisco has any feature that can meet my requirements as stated above
> .(hsrp can only fulfill second cond )
>
> also can the solution work with asa ??
> **
> if yes plz provide me links
>
> Regards
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Nov 30 2010 - 22:05:48 ART