I need an expert advice on this

Hi,
I have 4 locations accross the us connected via hardware vpn. My main
location has a sonicwall 4060 with two t1 as redundancy. If one fails the
location (main) is able to still be online. Now during a t1 failure the other
locations are not able to establish a vpn (their routers can only hold one ip
address at a time) so I have to manually login into the routers and set the
ip of my working t1 so that they can reconnect to the vpn. Now I know that
thre are routers out there that can have more that one ip address like my
4060 but they are a bit expensive so I was wondering if I can set Windows
Server 2003 with ISA at all the locations and have those servers hold 2 IP
addresses (my 2 t1 lines) and connect via vpn to my 4060 and if 1 of my t1
fail the servers at the locations will use my next available ip to reconnect
to the vpn?

What's most of the companies do in a situation like this?

Thanks

 

No.
ISA absolutely, positively will not.
It is not a matter of ISA or your routers,...it is just the way TCP/IP
works. That is why those other routers cost more,...they have aditional
software features that function "above" TCP/IP and overcome the situation.

You get way you pay for. If you aren't willing to pay, then you don't
"get".

 

Well, yes, you can get the two VPNs to work, but
it won't fail over as you wish.

It's a (re)routing problem really.

You might be able to write a program to test the
connectivity and CHANGE the routing table
programmatically (that is basically what those
expensive routers do.)

 

Check out a product called RainConnect from Rainfinity. It's a connection
load-balancing and failover add-on you can run on ISA Server. RainConnect +
ISA Server will accomplish what you're asking for.

http://www.rainfinity.com/products/rainconnect.html

Steve Riley