https://community.hpe.com/t5/operating-system-hp-ux/vpn-solution/m-p/2904208#M752247 Hello,<BR />We currently have 2 servers one inside a firewall the other is outside. We want to create a failover solution using a Cisco redirector. Basically customers come to our external site to make purchases. If that external box has problems we want to use the functionality of the Cisco re-director to point/failover the customers to our internal box. How difficult would it be do to create that environment? A VPN is the only solution for us as we are unable to obtain more hardware. My main question is can the Cisco redirector distinguish between inside and outside a firewall? Also, where would the VPN reside before the re-director or behind it? Thanks for taking the time out to explain this to me as I'm really confused and not sure. Thu, 13 Feb 2003 18:59:34 GMT ingrid_2 2003-02-13T18:59:34Z https://community.hpe.com/t5/operating-system-hp-ux/vpn-solution/m-p/2904208#M752247 Hello,<BR />We currently have 2 servers one inside a firewall the other is outside. We want to create a failover solution using a Cisco redirector. Basically customers come to our external site to make purchases. If that external box has problems we want to use the functionality of the Cisco re-director to point/failover the customers to our internal box. How difficult would it be do to create that environment? A VPN is the only solution for us as we are unable to obtain more hardware. My main question is can the Cisco redirector distinguish between inside and outside a firewall? Also, where would the VPN reside before the re-director or behind it? Thanks for taking the time out to explain this to me as I'm really confused and not sure. Thu, 13 Feb 2003 18:59:34 GMT https://community.hpe.com/t5/operating-system-hp-ux/vpn-solution/m-p/2904208#M752247 ingrid_2 2003-02-13T18:59:34Z https://community.hpe.com/t5/operating-system-hp-ux/vpn-solution/m-p/2904209#M752248 To terminate a VPN, traffic must "cross" through the equipment that provides the VPN (e.g. the concentrator).<BR /><BR />If you're going to all of that trouble, I'd force everyone to use the VPN; it's more secure anyway. <BR /><BR />Then put the local director on the inside interface of the concentrator.<BR /><BR /> Mon, 17 Feb 2003 15:16:49 GMT https://community.hpe.com/t5/operating-system-hp-ux/vpn-solution/m-p/2904209#M752248 Christopher Caldwell 2003-02-17T15:16:49Z