I have many separate offices connected to my access switch and I am providing their internet access. These customers do not need to "see" each other. How do I aggregate them into one pw out to the internet? I know that H-VPLS could do the same, but that requires hardware that I do not have (7600). Could I accomplish the same task with my current 6509 in the core and 3750 and 400 series access switches? Any help would be greatly appreciated.
In case you want to use VRFs you can achieve this by
1) configure MP-BGP on your 6509
2) connect each separate office/VLAN in a separate VRF
3) create an Internet VRF and insert a default route
4) import all office routes into the Internet VRF and exort the default route to all office VRFs
5) connect the Internet VRF directly to a firewall preventing office to office connectivity, doing the NAT and secure everything against the internet.
The last point is important, because if you connect a router to the internet VRF, it would have all offoce routes and would again interconnect them. Basically one office A would be able to send packets to another office B by first following the default route and the CE would then send the packets back to the office B based on longest match routing.
A second option would be to use a FWSM separate the different offices by using the firewall functionality. This would also allow for greater control and optionally for office to office traffic, if this requirement would ever arise.
Sure there are eyamples for various scenarios in the "Cisco IOS Multiprotocol Label Switching Configuration Guide".
For your scenario - many clients accessing a common service without client-client connectivity - you find the explanations and example configurations e.g. at "Configuring Scalable Hub-and-Spoke MPLS VPNs"
Introduction: The "external-out enable" command is available for
configuration under the "router ospf process" in case of the IOS-XR
operating system. This command basically enables advertisement of
intra-area routes on the device as external routes in th...
Introduction Basic configuration for netflow Scale parameters for
netflow Netflow support Architecture Packet flow for netflow Inside the
LC CPU Netflow Cache size, maintenance and memory Sample usage Cache
Size Aging Permanent cache Characteristics Which...