Can a T1 be partitioned - WAN, VPN and shared Internet access??

[melodymakers]

Is it possible to have a LAN to LAN connection via a VPN and still have shared Internet access for the local LAN. It seems that once the VPN is established, the ability to browse the Internet will be lost because of the tunnel. If the VPN connection is being made over a T1 line to the Internet, can the T1 be partitioned so that part of it is dedicated for the VPN and part of ti is dedicated for the shared Internet connection? Can someone explain? Thanks for shedding some light on this subject for me.

[amitsonik]

Depending on the CSU/DSU and the type of Card you are using in the router you can split the T1. Larscom CSU/DSU (Model "Split T") has the capability to split the T1, you can allocate the number of channels that will be used for the VPN and the bandwidth that is allocated for Internet Access. Even in Cisco they have Network Modules which can split the T1 in channel groups. This way you will be able to Split the T1.

Thanks,

Amit Sonik

[velimirmkd]

Hi,

No problem. Actually you are defining traffic between two networks as VPN, you are not difinig the interface to specifically be VPN interface, if that is what you meant. So basicly you define that traffic from LAN A, to LAN B will be encrypted and the rest of the traffic on the physical interface will be left untouched. I've done it on serial interface, why would T1 be any different?

Hope this helps

Velimir

[Gilles Dufour]

The ACL control what traffic will be encrypted (or sent into the tunnel) and what traffic is forwarded un-encrypted.