Simulation – BGP over IPsec VTI across two DC scenario


  • In this scenario we’ll simulate a setup where there are two DC providing internet egress for out SITE1.
  • eBGP peering is established over IPsec VTI that are configured on both DC ASA firewall.
  • We’ll implement dual IP SLA tracking on the ASA firewall.
  • We’ll try to load balance traffic by utilizing path-1 for internet traffic and path-2 for remote office traffic.
  • This simulation takes into account how failover and backup path will be handled in this kind of setup.

Leave a Reply