default route vpn secondary point-to-point

[nelifecare]

I'm wondering if anyone can assist me on this setup.

I have an office connected via a private circuit and also setup for VPN. What I would like to do is keep the point-to-point up and running BUT use the VPN as the primary. Currently I am using OSPF which causes the route to the remote office to use the point-to-point as the primary and if that fails it automatically fails over to the VPN. I would like to swap this around. The point-to-point is directly connected to a cisco 2811 on one side and 1811 on the other so OSPF determines the directly connected link to be the primary. I have an ASA5510 and ASA5505 for the VPN connection. Both sites have a 3560G as the subnets default gateway. Currently with ALL ciruits up, the primary connection is the point-to-point because the routers say, "hey I know how to get to that subnet since it is directly connected to me." If the router doesn't know how to get to the other subnet it sends it to its gateway the ASA then the ASA creates the tunnel and all is good.

Currently what I am doing is shutting down one interface on one of the routers via the point-to-point which causes all traffics to default to the ASA then over the VPN to the other VPN. I want this connection to be the primary, because of the greater bandwidth provided and the point-to-point to be secondary.

I hope I have explained myself well enough for someone to point me in the right direction.

Thanks,

Jeremy

 

[unclerico]

do you have all of the links with the default OSPF cost?? if so, you'll need to tweak the cost of the interface connected to the router to be higher like ip ospf cost 20 or something like that.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)