Chapter 7. Solutions for Geographic Site-to-Site High Availability

In Chapter 5, "Designing for High Availability," we had introduced elements of local IPsec Virtual Private Network (VPN) high availability and geographic IPsec VPN high availability. At this point, you should feel comfortable incorporating high availability in to the design of your IPsec VPN tunnel termination points using the design principals discussed in Chapter 6, "Solutions for Local Site-to-Site High Availability." In this chapter, we will extend our focus of IPsec VPN High Availability (HA) to incorporate design principals specific to geographic IPsec VPN HA. The design concepts pertaining to geographic HA are discussed in detail in this chapter, and reinforced with case studies illustrating applications of each design option:

• Multiple Peer Statements with Routing Protocols and Reverse Route Injection

• Encrypted Routing Protocols Using IPsec and Generic Routing Encapsulation (GRE)

• Peer Management with Dynamic Multipoint VPN (DMVPN)

Use of the design topics discussed in this chapter in conjunction with the local IPsec VPN HA topics discussed in Chapter 6 should provide you with the design awareness needed to begin to address fundamental IPsec VPN HA design challenges.