Customer is curently having office in mumbai and kolkata connected over point to point link. As well as a backup connectivity on internet using site-to-site VPN.
At mumbai office there is internet connectivity as well as at kolkata office.
Requirement is to consolidate the resources keeping in to consideration redundancy of the overall wan network.
Kolkata lan should communicate with mumbai lan bypassing the firewall.
Kolkata lan should go to internet from mumbai router
At mumbai office we will have dual last mile on ethernet drop.
Similarly at kolkata we will have dual last mile for PoP connectivity over ethernet last mile.
MPLS will run on the proposed connectivity. also we are looking at running internet on the same last mile using different vrf in the router configuration.
Summary of Config:-
Mumbai :- Dual last mile will terminate on cisco router ethernet
Router lan port will terminate on layer 2 switch.
Layer 2 switch will have two vlans. (One vlan will be for private mpls
communication and other interface for Public (internet) communication.
On the same layer 2 switch firewall will be terminated.
Router will have two subinterface (One for Private MPLS connectivity ,
other for Public connectivity).
Internet will run over MPLS using multiple vrf.
Router WAN will also have multiple subinterface (One for private and one for public network). In all there will be four subinterface on the wan port for the two last mile and two subinterface on the lan side.
Kolkata will browse from mumbai.
Nat outside will be enabled on the public interface.
Nat inside will be enabled on the private interface.
Router will have default route pointing towards internet vrf gateway IP
Also there will be specific route for kolkata lan via private MPLS vrf
Gre tunnel with kepalive will be used on the router to track ethernet
Will the above configuration help in achieving the required goal or we need to add any additional feature for it to work properly.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...