<div>Hi Matthew,</div>
<div>What a wonderful reply. Thank you very much for your reply. I was thinking in wrong way. We have just 1Mbps full duplex Internet connection from Verizon and we are experiencing lot of voice quality issues recently. I know now I should move to router based VPN. Can I do EIGRP between different provide without having service agreement? What I heard I have to pay extra money for EIGRP. After read your reply I did some research on the web and found bellow link from Cisco. Do you think this is enough information for me to implement VoIP environment you have suggested?
</div>
<div><a href="http://www.cisco.com/warp/public/471/dcmvpn.html">http://www.cisco.com/warp/public/471/dcmvpn.html</a></div>
<div>By any chance, do you have a sample configuration of your network which I can refer?</div>
<div> </div>
<div>Best Regards,</div>
<div>Manoj</div>
<div> </div>
<div><br> </div>
<div><span class="gmail_quote">On 9/13/06, <b class="gmail_sendername">Linsemier, Matthew</b> <<a href="mailto:MLinsemier@apcapital.com">MLinsemier@apcapital.com</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<div>
<div lang="EN-US" vlink="blue" link="blue">
<div>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Manoj,</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Do you currently have private lines or some other circuits interconnecting your offices or are you planning to use VPN exclusively for voice and data? My major concern when using a Cisco PIX for voice would be Quality of Service. While the PIX can preserve DSCP values as they are passed across the tunnels, unless anything has changed in
7.x, it doesn't have the ability to perform marking, LLQ prioritization, and traffic shaping. This means that before any traffic is passed to the PIX, the device behind it (a switch or router) will have to perform some of these functions (say marking or traffic shaping). In regards to LLQ you are out of luck.
</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">For our Teleworker VPN network we utilize a 2851 at the head-end and failover site and 871/877 routers at our remotes. This gives us the capability to mark, LLQ, and shape traffic at the edge, before it is passed on to the ISP. Additionally we utilize DMVPN and GRE to maintain routing information (EIGRP) and to dynamically handle routing changes when we loose a VPN link (say to our head-end). I think you can do some least cost routing type things on the PIX to achieve the same effect, but it's much easier in IOS.
</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Your ideas are sound in my opinion. I'm sure that there are some people that are handling voice fine using Cisco PIX's however we had mixed results when we were using them. Once we moved to the IOS VPN several of our QoS issues were resolved. Regardless, you always have to remember that it still is the Internet and not a private network connection, so you get what you get.
</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Hope this helps,</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">-Matt</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<div>
<div style="TEXT-ALIGN: center" align="center"><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">
<hr align="center" width="100%" size="2">
</span></font></div>
<p><b><font face="Tahoma" size="2"><span style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">From:</span></font></b><font face="Tahoma" size="2"><span style="FONT-SIZE: 10pt; FONT-FAMILY: Tahoma"> <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">
cisco-voip-bounces@puck.nether.net</a> [mailto:<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>] <b><span style="FONT-WEIGHT: bold">
On Behalf Of </span></b>Manoj Kalpage<br><b><span style="FONT-WEIGHT: bold">Sent:</span></b> Wednesday, September 13, 2006 5:20 AM<br><b><span style="FONT-WEIGHT: bold">To:</span></b> <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip@puck.nether.net" target="_blank">
cisco-voip@puck.nether.net</a><br><b><span style="FONT-WEIGHT: bold">Subject:</span></b> [cisco-voip] ISP and VPN Failover for Call Manager based VOIPnetwork</span></font></p></div></div>
<div><span class="e" id="q_10da747a6be85188_1">
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p>
<div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Dear All,</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">I am looking for ISP fail over for VoIP network. We have small enterprise VoIP network. If I explain our network bit, Basically we have call manager and unity server in main office with PIX515. All the branch offices has PIX 501. With attached fail over solution I am going to create two tunnels from each branch office and have them connected to each firewall in main office. I think this way if one PIX515 fail at main office, still branch office can be connected through second PIX515. Bellow is the router configuration for routing between two PIX 515. This configuration itself doesn't mean anything without looking at a
diagram.I need to test this but I don't have enough gears with me right now and also I don't have 100% confidence on this. So, I would like to share with you folks. Any comments and ideas would be greatly appreciated.</span>
</font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Please find the diagram bellow link (Sorry it's han written one )</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://proxy.f2.ymdb.yahoofs.jp/bc/857e55a/bc/bd7f/failover.jpg?bcQM9BFBNirrJIWq" target="_blank">
http://proxy.f2.ymdb.yahoofs.jp/bc/857e55a/bc/bd7f/failover.jpg?bcQM9BFBNirrJIWq</a></span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">best regards,</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Manoj</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"><br>ip cef</span></font></p></div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">!####Establish sla monitors for use in tracking objects####!</span></font></p>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">ip sla monitor 1<br>type echo protocol ipIcmpEcho <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://174.16.0.1/" target="_blank">
174.16.0.1</a><br>threshold 3<br>frequency 5<br>ip sla monitor schedule 1 life forever start-time now </span></font></p>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">ip sla monitor 2<br>type echo protocol ipIcmpEcho <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://173.16.0.1/" target="_blank">
173.16.0.1</a><br>threshold 3<br>frequency 5<br>ip sla monitor schedule 2 life forever start-time now <br>!</span></font></p>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">!####Configure Tracking objects (referencing IP SLA monitor's above)####!</span></font></p>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">track 101 rtr 1 reachability<br>!<br>track 102 rtr 2 reachability<br>!<br>!<br>!<br>!<br>!####Configure Interfaces with NAT####!</span></font></p>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">interface FastEthernet 0/1<br>ip address <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://172.16.0.1/" target="_blank">172.16.0.1
</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://255.255.0.0/" target="_blank">255.255.0.0</a><br>ip nat inside</span></font></p>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">!<br>interface Fastethernet 0/0<br>ip address <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://173.16.0.2/" target="_blank">173.16.0.2
</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://255.255.255.0/" target="_blank">255.255.255.0</a><br>ip nat outside</span></font></p>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">!<br>interface Fastethernet 0/2<br>ip address <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://174.16.0.2/" target="_blank">174.16.0.2
</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://255.255.255.0/" target="_blank">255.255.255.0</a><br>ip nat outside</span></font></p>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">!<br>ip classless<br>!####Configure gateway of last resort with tracking objects####!<br>ip route <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://0.0.0.0/" target="_blank">
0.0.0.0</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://0.0.0.0/" target="_blank">0.0.0.0</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://173.16.0.1/" target="_blank">
173.16.0.1</a> track 101 <br>ip route <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://0.0.0.0/" target="_blank">0.0.0.0</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://0.0.0.0/" target="_blank">
0.0.0.0</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://174.16.0.1/" target="_blank">174.16.0.1</a> track 102</span></font></p>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">!####Configure NAT statements for most outbound traffic####!<br>ip nat inside source route-map ISP1 interface FastEthernet 0/0 overload<br>ip nat inside source route-map ISP2 interface FastEthernet 0/2 overload
</span></font></p>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">!<br>access-list 10 permit <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://172.16.0.0/" target="_blank">172.16.0.0</a> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://0.0.0.255/" target="_blank">
0.0.0.255</a><br>access-list 101 permit icmp any host <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://173.16.0.1/" target="_blank">173.16.0.1</a> echo<br>access-list 102 permit icmp any host <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://174.16.0.1/" target="_blank">
174.16.0.1</a> echo</span></font></p>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">!<br>!####Configure route maps for reference in NAT statements####!<br>route-map ISP2 permit 10<br>match ip address 10<br>match interface Fastethernet 0/1
<br>!<br>route-map ISP1 permit 10<br>match ip address 10<br>match interface Fastethernet 0/0 <br>! </span></font></p>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"><br clear="all"></span></font></p></span></div>
<div></div><font face="Arial" size="2">
<p><font color="#808080">
<hr>
</font>
<p></p>
<p><font face="Verdana" color="#808080"><strong>CONFIDENTIALITY STATEMENT</strong></font></p>
<p><font face="Verdana" color="#808080">This communication and any attachments are <strong>CONFIDENTIAL</strong> and may be protected by one or more legal privileges. It is intended solely for the use of the addressee identified above. If you are not the intended recipient, any use, disclosure, copying or distribution of this communication is
<strong>UNAUTHORIZED</strong>. Neither this information block, the typed name of the sender, nor anything else in this message is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message. If you have received this communication in error, please immediately contact me and delete this communication from your computer. Thank you.
</font></p>
<p><font color="#808080">
<hr>
</font>
<p></p>
<p></p></p></p></font></div></div></blockquote></div><br>