OSPF/VPN for DR sites

[JoyriderUK]

We have two offices which both will have DR sites. The offices are connected to their DR sites via a dedicated leased line.

The offices and DR sites have a 2mb connection to the Internet with a PIX.

So the topology looks like this....

[Office 1] [Office 1 DR]
Inside network ----Router ------ Router ---- Inside Network
| |
PIX PIX
|-------------Internet -------------------|
PIX PIX
| |
Inside network ----Router ----- Router ---- Inside Network
[Office 2] [Office 2 DR]

I'd like to use VPN's to link all the sites in a mesh, to provide backup routes to the respective DR's sites. I'm hoping to use a routing protocol with all of this...

where do i start?!?!?

 

[JoyriderUK]

http://www.robander.dircon.co.uk/dr.jpg

will give a better overview of the topology.

 

[dopehead]

Well, you could just use regular Site-To-Site VPN between the pix'es and then do routing protocol on your routers with a floating static to go out the pix in case the ospf dies on your router links (i.e no connection).

The Pix'es just need a crypto map for each location you wan't to have a potential route to, then you could just control whether it uses the pix or not in your ospf.

Jan


Network Systems Engineer
CCNA/CQS