I got asked to get a backup for a frame relay network, hub spoken with 2 spokes.
Right now the topology a big ospf area 0, with a default route to the hub where the spokes get to the internet.
I was thinking aboutVPN, but I not quite sure if it will work, this is the why I’m getting your opinion.
New topology above
The ospf is pont-to-point, the area 0 would be now only in between the firewall and the frame relay’s HUB, between the spokes and the HUB I’d put a area, for ex: area10 and 11. These areas, 10 and 11, will be totally stub. This way I’d have only a default route for the HUB correct ?
At the spokes we would have a static route with its administrative distance changed to 120, less preferred then the ospf 110 default route, to the Internet.
The firewall would be our VPN concentrator and for routing we would have a default to the Internet. In the OSPF process I’d put a redistribute static for the Reverse Route Injection from the VPNs routes, and a route map to discard the default route to the Internet so it would not go to the ospf causing a loop and when the networks from the ospf be gone from the table on area 0 it will show up again but now behind the firewall
When the ospf spokes loses it's connectivity with the HUB the default route originated by ospf would pulled out the routing table and the static to the internet would be placed in the table.
The traffic would then be redirected to the internet which will be encrypted and sent to the firewall on the other side.
This document gives several answers on frequently asked questions for PFRv3 channel state behavior.
Q1: What are all the channel operational states from a BR (border role) perspective and what are the rules/conditions to be in each st...
The need was to reach an host inside a LAN through a VPN connection managed by the LAN gateway (Cisco 1921).
The LAN gateway performs NAT and there was a dedicate nat rule for the host i wanted to reach through VPN.
I couldn't connect to the hos...
We have 3 identical switches configured by someone else and would like to claim some of the Gigabit ports(G1/G2/G3/G4) for use on servers. When we try to change the wiring and configuration, we run in to connectivity issues. Attached is a des...