Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Silver

DMVPN for Back-up Only

We have remote site office with private link directly into corporate world. This is the primary circuit.

However, now looking to introduce dmvpn to act as back-up only. Although dmvpn is ipsec, the router still has public ip. As such the corporate would be potentially opened behind this router with no fw.

Which design and features would need to be introduced to protect the business to the same level it would normally?, i.e. dual-skinned fw architecture and vpn dmz's

thanks in advance

Ajaz

1 REPLY

Re: DMVPN for Back-up Only

just permit only what you need....

udp 500, 4500

esp

ah

gre (depends on IOS version)

107
Views
0
Helpful
1
Replies
CreatePlease to create content