Hi Magnus.
First of all, the MSR 900 has two modes of operating the WAN interfaces:
- active-active
- active-standby
For active-standby you have to configure the second WAN interface, as in the configuration guide (it is similar to the 3G example), as a standby interface for the first one:
<router> system-view
[router] int eth 0/0
[router-Ethernet0/0]standby int eth 0/1
Then you have to configure the process of measuring the quality of the primary link (eth 0/0) and establish the parameters that trigger the passing to the second link (eth 0/1).
The configuration guide has in-depth details of the configuration - study the examples and use the configuartion task-list.
Please be aware that you need both interfaces configured for outside nat and two routes (one for each ISP):
ip route-static 0.0.0.0 0.0.0.0 x.x.x.x preference 60 description Primary link (1st ISP)
ip route-static 0.0.0.0 0.0.0.0 y.y.y.y preference 120 description Backup link (2nd ISP)
x.x.x.x and y.y.y.y are the gateways for the ISPs
For active-active (load balancing), you have to have both interfaces connected at the same time (skip the standby part).
The static routes should look like this:
ip route-static 0.0.0.0 0.0.0.0 x.x.x.x preference 60 description (1st ISP)
ip route-static 0.0.0.0 0.0.0.0 y.y.y.y preference 60 description (2nd ISP)
Now for the VPN part.
In order to greatly simplify your design, use HP DVPN technology (embedded in all MSR routers).
Make the upgrade to the latest Comware OS and configure one router as DVPN Hub (VAM server + VAM client) and the other as DVPN Spoke (VAM Client).
You can find all the details in the configuration guide.
You can use OSPF to route traffic between the subnets of the internal LANs of your routers.
For maximum redundancy, you can configure:
- both routers with two active-active interfaces;
- router 1: VAM Server on ISP1 and ISP 2 (two VAM instances)
- router 2: VAM client on ISP 1 and VAM client on ISP 2
- use OSPF to route traffic
There is a very good example in the configuration guide (Layer 3 - IP Services -> DVPN Configuration)
Regards,
Alex