Hub to spoke ipsec vpn

tdorduncu · ‎01-14-2009

We've 7206 vxr router with atm oc-3 interface.Our branches are connected the hub site via p2p ATM port,we have no encryption on the links and we want to migrate this links to ipsec vpn tunnels and hub&spoke topology.

What is the best solution for this issue

Giuseppe Larosa · ‎01-14-2009

Hello Tolga,

if all your routers are Cisco you should think to use DMVPN

see

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/DMVPDG.html

you can also implement QoS over DMVPN.

But you want to implement encryption over the ATM links or to leave the ATM links and to use internet accesses ?

In both cases you should be able to use DMVPN.

Hope to help

Giuseppe

tdorduncu · ‎01-15-2009

we've p2p ATM links,we can not leave this.Any solution for this infstracture ?

Rick Morris · ‎01-15-2009

Why do you need encryption on a p2p link running ATM? In theory you are only extending your LAN.

tdorduncu · ‎01-15-2009

ATM link its pass through over ISP links,we have to encrypt data on this links