[c-nsp] MPLS/VPN + Internet Setup

Ahmad Cheikh Moussa acm at netuse.de
Mon Aug 7 04:20:58 EDT 2006


Hi!

Oliver Boehmer (oboehmer) wrote:
> Ahmad Cheikh Moussa <> wrote on Monday, August 07, 2006 10:06 AM:
> 
>> Hi!
>>
>>  >yes, vrf-lite is used for this purpose in several networks I'm
>>  aware >of, >so I'd call this still best current practice for most
>>  applications >(maybe not for some very security sensible folks who
>>  don't trust >VRF-lite segmentation on the CE).
>>
>>  >You might need to spend some thoughts on the QoS part (if needed),
>>  >often >the requirement is to be able to use the full access speed
>>  for either >VRF/sub-interface, but still deploy some granular min-bw
>>  guarantees for >certain classes within the vrf.. this usually asks
>>  for a hierarchical >qos concept on the physical interface level.
>  
>> I have read this thread and I have a question.
>> Is this scenario possible with two routers and with
>> two diffent leased lines, so that both routers are
>> a backup for each other. The goal is that VPN and Internet
>> works all the time, as long as one router is up and running.
> 
> yes. what makes you think it wouldn't be possible? 
Nothing, I only wanted to know if this is possible.
How would you configure the redundancy ?
HSRP within a vrf instance, or redundancy through a
routing protocoll like eigrp, bgp ??

Regards,
  Ahmad



-- 
Ahmad Cheikh-Moussa
NetUSE AG
Dr.-Hell-Straße, 24107 Kiel, Germany
Telefon: +49 431 2390 400 --  Telefax: +49 431 2390 499
Service: Service at NetUSE.DE --  http://NetUSE.DE/




More information about the cisco-nsp mailing list