Routing between frame relay and VPN over DSL

[jbenney]

Ok I got on for you...

Since the cost of frame relay still is coming down at all, we have decided to enhance of bandwidth between our headquarters and our remote sites by using VPN over DSL type implementation. We still have our frame relay in place and we would like to use it as a backup in case the DSL lines go down, etc.

We have HQ and two remote sites.

At HQ:
Workstations on 10.1.0.0/16 default gateway is Cisco Switch 10.1.1.1
Cisco 1700 Modular Router is 10.1.1.2 which connects via Serial to the two remote sites.
Sonicwall TZ170 is 10.1.1.200 which connects to road runner line and is providing VPN

At NH:
Workstations on 10.6.0.0/16 default gateway is Cisco 1700 Modular Router 10.6.1.1 which connects via serial to HQ and IA.
Sonicwall TZ170 is 10.6.1.200 which connets to DSL and is providing VPN to HQ

At IA:
Workstations on 10.5.0.0/16 default gateway is Cisco 1700 Modular Router 10.5.1.1 which connects via serial to HQ and NH.
Sonicwall TZ170 is 10.5.1.200 which connects to DSL and is providing VPN to HQ

All Cisco 1700's have an extra Ethernet interface that is not being used. I thought I could keep the workstations pointing to the cisco then have the cisco route through the Sonicwalls VPN.

The only way I could get this working correctly was to point the workstations to the Sonicwall but that doesnt leave me a redunant connection if the DSL fails.

My question is how can I point the workstations to the Cisco and have Cisco route appropriately through the Sonicwall and back to the frame if the Sonicwall link fails?


Thanks!
Jack

 

[IMC]

Wht don´t you run an internal routing protocol (like EIGRP)between the routers, so when a link goes down (the VPN or the leased lines) your routing table will reflect the changes.

J.M.

Juan Manuel Garcia Carral

 

[jbenney]

That is true, however should I keep the Cisco as the default gateway or the sonicwall? I had trouble getting the workstations seeing the VPN unless it was using the Sonicwall as the default gateway.

 

[IMC]

You should keep the Cisco as the internal Gateway for the workstations. then run some routing protocolo (the one you feel more comfortable) it will give you routes through the VPN and the frame relay link. You can add a Cisco tunnel (GRE tunnel) over the two Cisco over the VPN path so you see only one hop and a new interface.

Juan Manuel Garcia Carral