[c-nsp] MPLS/VPN + Internet Setup
Oliver Boehmer (oboehmer)
oboehmer at cisco.com
Mon Aug 7 04:15:05 EDT 2006
Ahmad Cheikh Moussa <> wrote on Monday, August 07, 2006 10:06 AM:
> Hi!
>
> >yes, vrf-lite is used for this purpose in several networks I'm
> aware >of, >so I'd call this still best current practice for most
> applications >(maybe not for some very security sensible folks who
> don't trust >VRF-lite segmentation on the CE).
>
> >You might need to spend some thoughts on the QoS part (if needed),
> >often >the requirement is to be able to use the full access speed
> for either >VRF/sub-interface, but still deploy some granular min-bw
> guarantees for >certain classes within the vrf.. this usually asks
> for a hierarchical >qos concept on the physical interface level.
> I have read this thread and I have a question.
> Is this scenario possible with two routers and with
> two diffent leased lines, so that both routers are
> a backup for each other. The goal is that VPN and Internet
> works all the time, as long as one router is up and running.
yes. what makes you think it wouldn't be possible?
oli
More information about the cisco-nsp
mailing list