<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Hi Steve,</p>
<p>yes, you can have your primary link up/up AND an IPSEC tunnel
which is up/idle, ready to take traffic once the main link fails.</p>
<p>IP SLAs and 'track' to trigger the route change on the CPE end
might be useful as well...</p>
<p><br>
</p>
<p>Regards,</p>
<p>Mike<br>
</p>
<pre class="moz-signature" cols="72">Mike Taylor
The Total Team
DDI: +64 33530993
MOB: +64 274731969
0800 888 326 / +64 3 3779050</pre>
<div class="moz-cite-prefix">On 19/01/17 00:14, Steve Hille wrote:<br>
</div>
<blockquote
cite="mid:SYXPR01MB175877F9859D96815006DA56B37F0@SYXPR01MB1758.ausprd01.prod.outlook.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Hi all,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have a brief question about FlexVPN – we
are starting to deploy a lot more IPSEC sites and I’d like to
look at simplifying it a bit, I usually use IP SLA in case the
main link fails we have a 3G backup, at present because the
tunnels are built with static IP addresses it means the users
have to connect to the VPN until the hardened connection is
back up (and it’s very rare that they go down thankfully).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m using a lot of Cisco 1941’s with a 4G
HWIC, I’m assuming that setting up FlexVPN will allow the
tunnel back to the VPN termination router to be built no
matter if we have the hardened link up or if that hardened
link has failed, I’m assuming it will pick the tunnel back up
using the cellular connection? I just set 2 static routes down
the tunnel for our internal traffic and stick a higher metric
on the cellular route?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks in advance.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Steve<o:p></o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
<br>
</body>
</html>