Hi All

Here is my situation and I am hoping for a little guidance on this one

I have 2 locations, both with 2 fiber internet connections

I need to setup redundant VPN's between these locations without the use of
BGP.


So, my setup would be something like this

Location A
Firewall 1
Connection to ISP1
Wan IP 24.22.22.1

Firewall 2
Connection to ISP2
Wan IP 33.33.33.1

Internal Interfaces are in a carp setup
Internal IP range is 192.168.0.0/24

Location B
Firewall 1
Connection to ISP1
Wan IP 24.22.21.1

Firewall 2
Connection to ISP2
Wan IP 33.33.32.1

Internal Interfaces are in a carp setup
Internal IP Range is 192.168.1.0/24


I have used sasync in the past, pfsync etc however, I have not tried to setup
a VPN where 2 ISPs are used without the ISPs setup with BGP.  Because BGP
convergance can take a bit of time, and the network in this case not being
able to drop for 1 second, I need to determine what option is best.

I have spoke with a cisco guy today and they can do multilink VPN's on cisco
for this, however, being a bit of a OpenBSD fan and prefer to use Openbsd over
cisco any time I can, I would really like to accomplish this task using
OpenBSD.

Thoughts or direction would be great


james

Reply via email to