[c-nsp] Any experience with DMVPN on ASR1K?
Nasir Shaikh
nasir at nasirshaikh.com
Thu Sep 20 05:05:00 EDT 2012
Thank you all for the valuable input.
I have now ordered 2 asr1001 to replace my 7206vxr NPE-G2s.
I only expect to service ~400 spokes per router so these routers with ESP
2.5 should be OK, I think.
I am sticking to phase 2. I have split our global network into 4 regional
(dual) DMVPNs with dual hubs - interconnected via a MPLS backbone. More
manageable that way, imho. So staying away from phase 3 for now.
I will however move from EIGRP to BGP dynamic peer groups.
Thanks again.
Nasir
-----Original Message-----
From: d lists [mailto:dlists95 at gmail.com]
Sent: dinsdag 18 september 2012 3:30
To: Nasir Shaikh
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Any experience with DMVPN on ASR1K?
We use ASR 1002 + ESP 5 as VPN hubs using both a dual tunnel and a SLB
type architecture (different hubs for different types). Currently
terminating 3500-4000 remote sites per ASR @ 12% cpu. Plan on moving
to BGP + dynamic neighbor in the near future, we'll see how that
scales. Current routing is a mix of static, eigrp & RIP passive.
Very happy with the ASR once the early IOS versions got sorted.
-dlists95
On Thu, Sep 13, 2012 at 11:50 PM, Nasir Shaikh <nasir at nasirshaikh.com>
wrote:
> Hi guys,
>
>
>
> We are planning to replace/upgrade our DMVPN hubs from 7206vxr npe-G2 with
> VAM2+ to ASR1Ks.
>
> Does anyone have any experience with running DMVPN on the ASRs?
>
>
>
> This is what we plan to order:
>
>
>
> Cisco ASR1001 System,Crypto, 4 built-in GE, Dual P/S
>
> Cisco ASR 1001 IOS XE UNIVERSAL
>
> Cisco ASR 1000 Advanced IP Services License
>
> IPSEC License for ASR1000 Series
>
> Cisco ASR1001 4GB DRAM
>
>
>
> Thanks
>
>
>
> Nasir
>
>
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
More information about the cisco-nsp
mailing list