I have a call coming up with Verizon for creating a VPN connection from our site over the Internet to a group of wireless devices that they have placed into a secure subnet which will be viewed as another remote site to our corporate lan. Verizon would not permit the use of an ASA for this (too bad, maybe feature support issues) and requested that we use a 19xx, 21xx router.
I have a 1921 and we have a call in a few days. I read that they want to use AES-256, BGP (BGP AS 65505) and the tunnel type is GRE/IPSEC transport mode. The local corporate network is 10.0.0.0 /8 and remote site is 10.250.250.0 /24. They have Nat traversal checked on on a form they sent me.
I want the remote site to simply have a default route to our corporate network. I did not want to use any routing protocol over the tunnel. So why is Verizon mentioning GRE/IPSEC and BGP??? I have asked them for a sample config and haven't heard from them or received anything yet. I am only using one router with no backup (don't want one but maybe on their end they have to implement a redundant link to meet their requirements?).
Anyone have sample config they have used for somethiimg similar to this type of connection with Verizon? I could spend a lot of time reading and wasting time if it turns out they BGP / GRE is not necessary but maybe the way they set these connections up it is a requirement by their network designs.
Thanks,
PDW
