Have a requirement to offer IPSec over broadband internet links terminating on shared concentrator(7200 series routers) at central NOC and using VRFs to provide IP isolation between different customers.
I intend to use CiscoWorks (at NOC) as a centralized configuration/device management solution in this environment, managing different client CPE configurations centrally.
Would appreciate information about the different modules needed to implement it, and any foreseeable problem with this implementation.
The VRF-Aware IPsec feature enables you to map IPsec tunnels to Virtual Routing Forwarding (VRF) instances, using a single public-facing address. A VRF instance defines the VPN membership of a customer site attached to the Provider Edge (PE) router. A VRF comprises an IP routing table, a derived Cisco Express Forwarding (CEF) table, a set of interfaces that use the forwarding table, and a set of rules and routing protocol parameters that control the information that is included in the routing table.
For the further detail of the VRF-Aware IPsec and VPN follow the link :
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...