Re: NAT for MPLS VPN

From: jlewis@lewis.org
Date: Tue May 28 2002 - 12:07:38 EDT


Are these MPLS VPNs yours or for customers? When we provide MPLS VPNs to
customers and they want the VPN to also have internet access, we have the
customer buy an internet connection and do NAT on their CPE, not on our
hardware. Typically, a MPLS VPN customer will have internet access at
just one location (though you could do it at multiple or each location).
Each VRF then has a default route pointing to the customer site that has
the internet connection.

On Tue, 28 May 2002, Duane de Witt wrote:

> I have a Cisco network, currently with tag-switching running but with no
> VPN's. I have a 7140 which is been used as the gateway for the network which
> has a link to a 7200 handling my internet connections. Currently the 7140
> has a default route pointing to the internet router, this route is
> redistributed by BGP for the rest of my network.
>
> When I add VPN's with VRF's I face a problem. I need the current default
> gateway to stay as is for the rest of the network, but I also need some kind
> of default gateway for the specific VRF and then I need to be able to get
> those packets out of the VPN and to the internet. I was planning on using
> the 7140 with some kind of NAT config with subinterfaces on the gateway
> within the VRF as the inside interface and then the interface connecting to
> the internet router as the outside interface. I don't know how to get the
> packets out of the VRF and on to the internet router.
>
> Has anyone got any ideas?
>
>
> Regards
>
> Duane de Witt
> Siemens Business Services
> Tel. +27 11 652 7613
> Fax. +27 11 652 2018
>
>

-- 
----------------------------------------------------------------------
 Jon Lewis *jlewis@lewis.org*|  I route
 System Administrator        |  therefore you are
 Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:11:58 EDT