MPLS over Internet

Unanswered Question
Jul 28th, 2010
User Badges:

We have a few sites that only have 2-5 people at them that we would like to extend our MPLS/ VRF's to.  Today we are using a nailed up VPN to an ASA with static routes pointing back to them.

Perfect world would be to have a router at the remote side running MPLS building an Easy VPN tunnel back to the ASA over the Internet and MPLS working through that.  Most of these sites have dynamic IP's or are behind a NAT router at remote location so having static IP's wouldn't be feasible.

Has anyone done this before?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Chetan Kumar Ress Wed, 07/28/2010 - 09:41
User Badges:
  • Silver, 250 points or more

Hi Charles ,

As per your senario you have internet connection in  remote location & you want to connect through Easy VPN & also want to run MPLS .

But i am not clear that exactly what you are looking for , there are to many option to connect remote locaiton to central locaiton over internet.

Why you want to run MPLS for Branch location.

Simply you can have DMVPN for all remote location. ( Good when you don't have static IP & Easy to implement ).


Chetan Kumar

charlesdf22 Wed, 07/28/2010 - 19:43
User Badges:

We have many VRF's on campus that we would like to extend to these locations, such as VOIP, management, etc.

The reason we were looking at Easy VPN was because we already have ASA's setup and configured and were hoping it would be a no brainer.

We could utilize another router to terminate these connections onto.

Thanks in advance.

Chetan Kumar Ress Thu, 07/29/2010 - 14:31
User Badges:
  • Silver, 250 points or more

Hi Charles,

To run MPLS /VRF over the internet is not an issue. To do that you just need to have an connectivity between the HUB & SPOKE router .

and that you can get over internet using below option.



3] GRE over VPN

3] Easy VPN

or etc .

But to run MPLS VRF you need that much of VRF interface at Spoke locaiton & that you can get by above option .


Chetan Kumar

bozhan Tue, 08/03/2010 - 06:27
User Badges:

oops, I must have posted the link when I was logged in. Anyway, just do a search using "vrf aware ipsec", then you'll get the public link



This Discussion