[c-nsp] MPLS VPN with lot of PPP interfaces and central firewall

[John Kougoulos]

On Thu, 21 Jan 2010, Gerald Krause wrote:
> For now I see 3 options for us:
>
> a) implement dedicated VRFs for each branch and map VRFn<->VLANn on the RTRs
> b) build a brigded L2 "LAN" from the CPE Dialer-Interfaces up to the
> Firewall-Ethernet Interface (how? bad idea?)
> c) some other brilliant approach... ;-)
>


GRE or Ipsec or whatever tunnel from the CPE to (or near) the firewall?