[c-nsp] MPLS/VPN + Internet Setup

Oliver Boehmer (oboehmer) oboehmer at cisco.com
Mon Aug 7 04:15:05 EDT 2006


Ahmad Cheikh Moussa <> wrote on Monday, August 07, 2006 10:06 AM:

> Hi!
> 
>  >yes, vrf-lite is used for this purpose in several networks I'm
>  aware >of, >so I'd call this still best current practice for most
>  applications >(maybe not for some very security sensible folks who
>  don't trust >VRF-lite segmentation on the CE).
> 
>  >You might need to spend some thoughts on the QoS part (if needed),
>  >often >the requirement is to be able to use the full access speed
>  for either >VRF/sub-interface, but still deploy some granular min-bw
>  guarantees for >certain classes within the vrf.. this usually asks
>  for a hierarchical >qos concept on the physical interface level.
 
> I have read this thread and I have a question.
> Is this scenario possible with two routers and with
> two diffent leased lines, so that both routers are
> a backup for each other. The goal is that VPN and Internet
> works all the time, as long as one router is up and running.

yes. what makes you think it wouldn't be possible? 

	oli



More information about the cisco-nsp mailing list