Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Moving to a VPN network environment separate from our Frame Relay

We are looking to establish a external VPN network environment and still keep our internal Frame Relay network up. We have all Cisco 2600 routers at each internal remote location. With this new external VPN network, we want to allow only certain connections to our main internal site and block traffic to our other internal remote sites. What equipment do you think would handle this VPN security and management the best? Any advice would be appreciated.

Thanks, Robbie

2 REPLIES
Silver

Re: Moving to a VPN network environment separate from our Frame

Routers with ipsec image handle the lan to lan scenario best. If you would be doing remote access vpn, the vpn3000 handles that best. If you need firewalling besides the vpn, the firewall could also perform vpn.

the best thing to do would be to contact your local Cisco Systems Engineer for a design plan that would suite your requirement best.

Regars,

New Member

Re: Moving to a VPN network environment separate from our Frame

I think router to router hub and spoke design might suite your need.

The central site will be the hub, and all your romote sites are spokes.

You can control the traffic depending on the ipsec match address access-lists.

(VPN interest traffic). Here is the sample config:

http://www.cisco.com/warp/customer/707/ios_hub-spoke.html

Best Regards,

96
Views
0
Helpful
2
Replies