Welcome to ISAserver.org

VPN failover

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Network Infrastructure >> VPN failover

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN failover - 16.Nov.2006 11:13:42 AM

Snojlsky

Posts: 34
Joined: 16.Aug.2001
Status: offline

Hi,

I’m thinking of using an ISA site to site VPN as a backup for an existing ”BLACKBOX VPN”.

Anyone that have tried to setup something like this?

I think I need to put the 192.168.10.x net with a higher metric in a vpn2vpn “Network” in ISA 1 and the other way around in ISA 2 and then have secondary routes with metrics on the ISA server… but I can only define a ip network once in ISA… right?

Site 1:
192.168.10.1 - BLACKBOX VPN GATEWAY (routes to 192.168.11.0/24)
192.168.10.2 - ISA SERVER (Internet access via ISP 1, this ISA is used for Internet access for both sites)

Site 2:
192.168.11.1 - BLACKBOX VPN GATEWAY (routes to 192.168.10.0/24)
192.168.11.2 – ISA SERVER (Internet access via ISP 2)

If this doesn’t work the second idea was to use linux routers/vpn tunnels published trough the isa:s so I only need to add routes with higher metrics in my isa servers…

Site 1:
192.168.10.1 - BLACKBOX VPN GATEWAY (routes to 192.168.11.0/24)
192.168.10.2 - ISA SERVER (Internet access via ISP 1, this ISA is used for Internet access
for both sites)
192.168.10.3 – ROUTER/VPN Termination

Site 2:
192.168.11.1 - BLACKBOX VPN GATEWAY (routes to 192.168.10.0/24)
192.168.11.2 – ISA SERVER (Internet access via ISP 2)
192.168.11.3 – ROUTER/VPN Termination

Anyone got an idea on how to solw this?

Best regards
Snoj