Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

DMVPN and Metro-E

Hi ,

I  have a customer who wants to deploy a Metro-E among all sites. But,  when I see what he wants i saw he wants to deploy DMVPN over that  MEtro-E as well. My question is: is this ok? I mean, Metro-E is not  secured already? What should he deploy DMVPN ob that metro connection  for?

I  have read a lot of papers and I saw that DMVPN is good to be deploy to  secure connections over internet, as backup or over a MPLS VPN ( aslgo  GETVPN) so im confused with this.

Regards

Everyone's tags (4)
1 REPLY
Hall of Fame Super Silver

DMVPN and Metro-E

Metro-E would normally be treated as a private network in that you can use exclusively private addressing and there is no exposure to the Internet. However it still does ride across your carrier's shared infrastructure and by itself provides no confidentiality protection from the carrier themselves. Overlaying DMVPN (or any other cryptographic protection) adds that confidentiality.

I would not normally expect it either unless the customer had some regulatory or compinace requirements that dictated enceyption for their data.

160
Views
0
Helpful
1
Replies
CreatePlease to create content