Re: Multiple IPSec-tunnels and load balancing

2009-06-30 Thread Brian A. Seklecki
On Tue, 2009-06-30 at 11:15 +0200, u...@o3si.de wrote:
> Is it possible to load balance / failover the traffic over IPSec? If
> so,
> should I use GIF for load balancing / routing?

That's what Cisco DMVPN is, as far as I can tell.  Was just reading
about it.

You're talking about GRE tunnels to two intermediary facilities on the
way to a common 4th facility?  Assign the routes equal cost path
routing?

~BAS

> 
> Thanks in advance for anyones advice!



Re: Multiple IPSec-tunnels and load balancing

2009-07-30 Thread Toni Mueller
Hi,

On Tue, 30.06.2009 at 11:15:21 +0200, u...@o3si.de  wrote:
> I try to use an OpenBSD firewall with two ADSL links connected (dynamic
> addresses!) to the internet. Now I want to establish two IPSec tunnels over
> each link to a central VPN gateway (OpenBSD too).
> 
> Is it possible to load balance / failover the traffic over IPSec? If so,
> should I use GIF for load balancing / routing?

failover is possible, and load balancing is said to be possible, but
I've not yet tried it.


Kind regards,
--Toni++