Combining multiple VPN technologies on a single head-end device

mminardi · ‎08-09-2007

We are currently running DMVPN on our Cisco 7206VXR with VAM2+ module (along with it being a head-end for our MPLS WAN).

I would like to be able to add the following capabilities to the router:

1. Traditional IPsec point-to-point VPN tunnels (to support our foreign company pieces that do not support DMVPN)

2. Traditional IPsec remote client VPN tunnels (to help us transition off of our VPN 3030 concentrators)

3. Cisco IOS SSL VPN (considering using this technology from Cisco)

So this would be combining 4 different VPN "technologies" together on the same head-end router. Are there any "gotchas" are known compatibility issues in trying to combine all of this on a single device in the same config?

Thanks.

tstanik · ‎08-16-2007

These L3VPN mechanisms are complementary rather than competitive. In fact, many service providers can increase their service footprint and gain other competitive advantages by combining VPN architectures and taking advantage of their respective strengths. The Cisco Network-Based IPSec VPN solution, described later in this paper, combines both architectures to enable service providers to expand their VPN portfolio with secure on-net and off-net remote access and remote site-to-site services