|
|
|
Regardless of how your network topology is designed and which of the example configurations most closely approximates your implementation, in order to optimize your VPN traffic you will need to send active probes from one of the CNA systems to the other end of the VPN or WAN circuit.
This requires you to configure your VPN to allow TCP or ICMP probes to exit your local network, and allow responses to return to the CNA USTAT VIPs.
It also means that at least one interface in the distant site must continually accept and respond to active probes.
The more measurements the CNA decision-maker process bases its decisions on, the more reliable the network. You should probe your endpoints as often as can be tolerated by the receiving end. If you are optimizing to a multi-homed remote size, Avaya recommends that you probe each VPN endpoint at a rate of two per second. If you are probing a small, single homed endpoint, you may want to reduce the rate so that you do not overburden the target device.
The best target for these probes is the CNA system itself, if you have a one at both ends of the circuit. If you only have an CNA system at one location, this target interface can be on one of your edge routers, or a choke router, or on the VPN device itself if the device can be configured to respond properly.
|
|
|