[c-nsp] MPLS VPN Running BGP w/ failover IPSec VPN Over Internet

[Gert Doering]

Hi,

On Tue, Jan 26, 2010 at 10:14:43PM -0500, Luan Nguyen wrote:
> Back when I was at VzB managed services, it's EIGRP over the DMVPN/IPSEC
> tunnel backing up BGP MPLS.  

Something along that line would be my suggestion as well.  Run an IGP over
the IPSEC tunnels (GRE-in-IPSEC, routing protocol on that) and also on
the MPLS links (as you can't reliably see whether an ethernet link is
"down" without some sort of protocol hello).

Set metrics so that MPLS links will be preferred, while available.  Done.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 305 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20100127/32833a4f/attachment.bin>