MPLS over Internet

Unanswered Question
Jul 28th, 2010

We have a few sites that only have 2-5 people at them that we would like to extend our MPLS/ VRF's to.  Today we are using a nailed up VPN to an ASA with static routes pointing back to them.

Perfect world would be to have a router at the remote side running MPLS building an Easy VPN tunnel back to the ASA over the Internet and MPLS working through that.  Most of these sites have dynamic IP's or are behind a NAT router at remote location so having static IP's wouldn't be feasible.

Has anyone done this before?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Chetan Kumar Ress Wed, 07/28/2010 - 09:41

Hi Charles ,

As per your senario you have internet connection in  remote location & you want to connect through Easy VPN & also want to run MPLS .

But i am not clear that exactly what you are looking for , there are to many option to connect remote locaiton to central locaiton over internet.

Why you want to run MPLS for Branch location.

Simply you can have DMVPN for all remote location. ( Good when you don't have static IP & Easy to implement ).

Regards

Chetan Kumar

charlesdf22 Wed, 07/28/2010 - 19:43

We have many VRF's on campus that we would like to extend to these locations, such as VOIP, management, etc.

The reason we were looking at Easy VPN was because we already have ASA's setup and configured and were hoping it would be a no brainer.

We could utilize another router to terminate these connections onto.

Thanks in advance.

Chetan Kumar Ress Thu, 07/29/2010 - 14:31

Hi Charles,

To run MPLS /VRF over the internet is not an issue. To do that you just need to have an connectivity between the HUB & SPOKE router .

and that you can get over internet using below option.

1] DMVPN

2] VPDN

3] GRE over VPN

3] Easy VPN

or etc .

But to run MPLS VRF you need that much of VRF interface at Spoke locaiton & that you can get by above option .

Reagrds

Chetan Kumar

http://chetankumar.blogspot.com

bozhan Tue, 08/03/2010 - 06:27

oops, I must have posted the link when I was logged in. Anyway, just do a search using "vrf aware ipsec", then you'll get the public link

-Bo

Actions

This Discussion