Combining multiple VPN technologies on a single head-end device
We are currently running DMVPN on our Cisco 7206VXR with VAM2+ module (along with it being a head-end for our MPLS WAN).
I would like to be able to add the following capabilities to the router:
1. Traditional IPsec point-to-point VPN tunnels (to support our foreign company pieces that do not support DMVPN)
2. Traditional IPsec remote client VPN tunnels (to help us transition off of our VPN 3030 concentrators)
3. Cisco IOS SSL VPN (considering using this technology from Cisco)
So this would be combining 4 different VPN "technologies" together on the same head-end router. Are there any "gotchas" are known compatibility issues in trying to combine all of this on a single device in the same config?
Re: Combining multiple VPN technologies on a single head-end dev
These L3VPN mechanisms are complementary rather than competitive. In fact, many service providers can increase their service footprint and gain other competitive advantages by combining VPN architectures and taking advantage of their respective strengths. The Cisco Network-Based IPSec VPN solution, described later in this paper, combines both architectures to enable service providers to expand their VPN portfolio with secure on-net and off-net remote access and remote site-to-site services
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...