Hi All,

I'm looking for a little advise.

I'm going to be setting up a secondWAN line between two 2850's currently connected via IPSec, and am wanting to combine the existing tunnel with a new tunnel through the new WAN. I've tried to read up on the best way to do this but am a little unclear on a couple of points.

Firstly, GRE addressing, from what I can tell as long as the GRE endpoints are in a private range ( ie 192.168.x.x ), then it doesn't really matter what you set them to as long as the end points on the end of each tunnel are the same, but each tunnel should have a fifferent subnet. Can somebody who know better correct of confirm please.

Secondly, the options seem to be either load-balance or failover, not both. With load-balance if one tunnel fail, with the other take over it's operation seemlessly or is failover the best option. Idealy I would like failover, but also like the idea over increasing the bandwidth between the two site via load-balancing.

Any help would be much appreciated.

Richard

Hi

When yon trunk the two together then now it doesn't matter what address you use.
For example if the remote subnets are 192.168.x.x then for the GRE id use something like 10.0.0.x. at each end.

In load balance mode the then the VPN that doesn't drop will still work.

Thanks for the reply,

For claification, should all 4 end-points of the tunnels have the same GRE subnet, ie 10.0.0.x

Kind Regards

Richard

No, there would be 2 different subnets

Profile1


Profile 2


Vice versa on the opposite end point router

That's great info, many thanks.