[c-nsp] DMVPN/mGRE on L3VPN - anyone experience issues with encapsulation overhead/MTU?

[Bruce Pinsky]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

JP Senior wrote:
> Hey, all.
> I'm looking at an option to consolidate and reduce complexity of a multi-provider L3VPN network in a way that lets me also use internet-based VPNs for backup.  Right now I have dual provider uplinks at all of my sites to provide me inter-office WAN connectivity.
> 
> DMVPN is a nice and easy option where I can have everything run in a single routing domain, drasticially simplifying my network topology.
> 
> Has anyone experience with a network running in such a design?  I am concerned about increased latency, and worse, packet overhead.  I'm not sure I'll be able to get jumbos on these providers, so I'll have to deal with ipsec/gre overhead.  I don't do anything crazy blocking with ICMP, but I'm still hesitant to move forward with such a design.
> 
> -JP Senior
> 

I have customers who run DMVPN over both L3VPN and Internet as the
substrate so that they have consistency in the design and architecture.
There can be MTU issues, but that varies by provider.  Otherwise, it works
great for them.


- -- 
=========
bep

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlJVmAgACgkQE1XcgMgrtya7fQCdGzGb2iQToBCidejusDRQugh8
G/cAnA1ZOaATEI//2+mXlkW09GVwiEzE
=g7Eb
-----END PGP SIGNATURE-----