WAN + GETVPN Design Question

[Jaber.Essam_2]

Hello,

Can anybody tell me, is it best practice to have GM and WAN Agg routers combined in one router in DC, instead of having GM router behind the WAN Agg router ?

If the best practice to have WAN Agg router and GM router separated ? can you please tell me, why?

Thanks in advance!

Jaber

[Joseph W. Doherty]

A GM router is?

[Jaber.Essam_2]

GETVPN components are Group Member (GM) routers and Key server routers (KS)

[Vasilii Mikhailovskii · Accepted solution]

Hello.

I would say: it depends :)

If you have enough capacity on one router  to do all the job - why not then, as high availability (in case of 2 routers) in the design should be achieved via routing protocol.

But if you need special QoS settings on Agg routers (that might be CE) or even a PFR, then it would be a good idea to dedicate a router for GM role.

[Jaber.Essam_2]

Hello,

Thank you vasilii for your reply, valid point,

also my opinion, router with high spics can handle both roles ( GM, WAN Agg with Qos), valid approach !

Thanks