setting up multiple (20 +) offices using 1720s and one 3030
Bookmark this page:
 Yahoo!
 Google
 Windows Live
 del.icio.us
 digg
 Netscape
|
|
||||||||||||||||
|
Posted by Joe on April 14, 2006, 5:09 pm
Please log in for more thread options 1) Can I setup a tunnel to the main office from all the sub offices and route the traffic through a core router instead of setting up a 20 office vpn cloud. 2) I'm looking at using easy vpn (EZ or easy). Any thoughts/experiences? This is all stemming from wanting to centralize configuration changes. Currently all sub offices have full access lists defining all other offices. Makes for a headache when downsizing the business, or expanding if you glass is half full. Joe Back Up Network admin. | ||||||||||||||||
|
Posted by Walter Roberson on April 14, 2006, 6:18 pm
Please log in for more thread options >2) I'm looking at using easy vpn (EZ or easy). Any
>thoughts/experiences? >This is all stemming from wanting to centralize configuration changes.
It sounds to me as if the newish "DMVPN" feature might be just what you are looking for. I have not, though, checked to see if it is supported on the 1720s; I'm pretty sure it isn't supported on the 3030. | ||||||||||||||||
|
Posted by Merv on April 14, 2006, 6:33 pm
Please log in for more thread options Conceptually DMVPN is a hub-and-spoke setup but it only requires one
tunnel interface configured on the hub. Thus adding spokes is easier. Dynamic spoke-to-spoke tunnels can be created so that other than some inital setup traffic ,spoke to-spoke traffic can flow directly between spokes. DMVPN is not supported on the 3030 VPN concentrator so you would need a suitably sized hub route capable of handling 20+ spokes. Also check out the new Configuring Cisco Easy VPN with IPSec Dynamic Virtual Tunnel Interface (DVTI) feature - again this is an IOS-based router VPN solution. | ||||||||||||||||
|
Posted by Joe on April 18, 2006, 12:47 pm
Please log in for more thread options very helpful. Something I don't understand though is why can't I route
the traffic through a core router through the vpn. Office A is the data center with the 3030 and a Large router. Ofice B and C are connected to Office A but do no know of each other. Then route all the traffic for our class B network through the core. I've tried to do this but I can't get the IP route statement to travel the Vpn tunnel. I'm still learning about all of this and any help woulf be great. | ||||||||||||||||
>1) Can I setup a tunnel to the main office from all the sub offices and
>route the traffic through a core router instead of setting up a 20
>office vpn cloud.