[c-nsp] Transparent WAN Encryption

Tarko Tikan tarko at lanparty.ee
Sun Feb 2 13:36:28 EST 2014


> If you are using a private MPLS (I.e. Not over Internet) & have Cisco
> CE routers consider GETVPN.

There is no reason why you can't use GETVPN inside L3VPN. This is 
exactly one use case for GETVPN and many people are using it successfully.

If you don't trust your provider at all, encrypting in CPE doesn't fly 
and you need separate routers. It's still good protection against 
traffic interception by 3rd party.


More information about the cisco-nsp mailing list