I need an expert advice on this

Hi,
I have 4 locations accross the us connected via hardware vpn. My main
location has a sonicwall 4060 with two t1 as redundancy. If one fails the
location (main) is able to still be online. Now during a t1 failure the other
locations are not able to establish a vpn (their routers can only hold one ip
address at a time) so I have to manually login into the routers and set the
ip of my working t1 so that they can reconnect to the vpn. Now I know that
thre are routers out there that can have more that one ip address like my
4060 but they are a bit expensive so I was wondering if I can set Windows
Server 2003 with ISA at all the locations and have those servers hold 2 IP
addresses (my 2 t1 lines) and connect via vpn to my 4060 and if 1 of my t1
fail the servers at the locations will use my next available ip to reconnect
to the vpn?

What's most of the companies do in a situation like this?

Thanks

No.
ISA absolutely, positively will not.
It is not a matter of ISA or your routers,...it is just the way TCP/IP
works. That is why those other routers cost more,...they have aditional
software features that function "above" TCP/IP and overcome the situation.

You get way you pay for. If you aren't willing to pay, then you don't
"get".

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"Chris" <(E-Mail Removed)> wrote in message
news:E4EB5E07-B99D-4C21-A60B-(E-Mail Removed)...
> Hi,
> I have 4 locations accross the us connected via hardware vpn. My main
> location has a sonicwall 4060 with two t1 as redundancy. If one fails the
> location (main) is able to still be online. Now during a t1 failure the
other
> locations are not able to establish a vpn (their routers can only hold one
ip
> address at a time) so I have to manually login into the routers and set
the
> ip of my working t1 so that they can reconnect to the vpn. Now I know that
> thre are routers out there that can have more that one ip address like my
> 4060 but they are a bit expensive so I was wondering if I can set Windows
> Server 2003 with ISA at all the locations and have those servers hold 2 IP
> addresses (my 2 t1 lines) and connect via vpn to my 4060 and if 1 of my t1
> fail the servers at the locations will use my next available ip to
reconnect
> to the vpn?
>
> What's most of the companies do in a situation like this?
>
> Thanks

Well, yes, you can get the two VPNs to work, but
it won't fail over as you wish.

It's a (re)routing problem really.

You might be able to write a program to test the
connectivity and CHANGE the routing table
programmatically (that is basically what those
expensive routers do.)

--
Herb Martin


"Chris" <(E-Mail Removed)> wrote in message
news:E4EB5E07-B99D-4C21-A60B-(E-Mail Removed)...
> Hi,
> I have 4 locations accross the us connected via hardware vpn. My main
> location has a sonicwall 4060 with two t1 as redundancy. If one fails the
> location (main) is able to still be online. Now during a t1 failure the
other
> locations are not able to establish a vpn (their routers can only hold one
ip
> address at a time) so I have to manually login into the routers and set
the
> ip of my working t1 so that they can reconnect to the vpn. Now I know that
> thre are routers out there that can have more that one ip address like my
> 4060 but they are a bit expensive so I was wondering if I can set Windows
> Server 2003 with ISA at all the locations and have those servers hold 2 IP
> addresses (my 2 t1 lines) and connect via vpn to my 4060 and if 1 of my t1
> fail the servers at the locations will use my next available ip to
reconnect
> to the vpn?
>
> What's most of the companies do in a situation like this?
>
> Thanks

Check out a product called RainConnect from Rainfinity. It's a connection
load-balancing and failover add-on you can run on ISA Server. RainConnect +
ISA Server will accomplish what you're asking for.

http://www.rainfinity.com/products/rainconnect.html

Steve Riley
(E-Mail Removed)



"Herb Martin" <(E-Mail Removed)> wrote in message
news:%23$(E-Mail Removed)...
> Well, yes, you can get the two VPNs to work, but
> it won't fail over as you wish.
>
> It's a (re)routing problem really.
>
> You might be able to write a program to test the
> connectivity and CHANGE the routing table
> programmatically (that is basically what those
> expensive routers do.)
>
> --
> Herb Martin
>
>
> "Chris" <(E-Mail Removed)> wrote in message
> news:E4EB5E07-B99D-4C21-A60B-(E-Mail Removed)...
>> Hi,
>> I have 4 locations accross the us connected via hardware vpn. My main
>> location has a sonicwall 4060 with two t1 as redundancy. If one fails the
>> location (main) is able to still be online. Now during a t1 failure the
> other
>> locations are not able to establish a vpn (their routers can only hold
>> one
> ip
>> address at a time) so I have to manually login into the routers and set
> the
>> ip of my working t1 so that they can reconnect to the vpn. Now I know
>> that
>> thre are routers out there that can have more that one ip address like my
>> 4060 but they are a bit expensive so I was wondering if I can set Windows
>> Server 2003 with ISA at all the locations and have those servers hold 2
>> IP
>> addresses (my 2 t1 lines) and connect via vpn to my 4060 and if 1 of my
>> t1
>> fail the servers at the locations will use my next available ip to
> reconnect
>> to the vpn?
>>
>> What's most of the companies do in a situation like this?
>>
>> Thanks
>
>