VPN solution

[ingrid_2]

Hello,
We currently have 2 servers one inside a firewall the other is outside. We want to create a failover solution using a Cisco redirector. Basically customers come to our external site to make purchases. If that external box has problems we want to use the functionality of the Cisco re-director to point/failover the customers to our internal box. How difficult would it be do to create that environment? A VPN is the only solution for us as we are unable to obtain more hardware. My main question is can the Cisco redirector distinguish between inside and outside a firewall? Also, where would the VPN reside before the re-director or behind it? Thanks for taking the time out to explain this to me as I'm really confused and not sure.

[Christopher Caldwell]

To terminate a VPN, traffic must "cross" through the equipment that provides the VPN (e.g. the concentrator).

If you're going to all of that trouble, I'd force everyone to use the VPN; it's more secure anyway.

Then put the local director on the inside interface of the concentrator.