On Wed, Aug 6, 2008 at 05:14, <[EMAIL PROTECTED]> wrote: > ... here I > have a cloud in the middle connecting several (20-30) DSL sites to a head > office (hub and spoke), and the thought of having to manage multiple > tunnels (one per vrf), per site is making me cringe..
We have successfully used PPP/L2TP in a similar scenario (multiple VRF-Lites over one logical IP-interface). What you need is a CPE supporting "L2TP Client Initiated Tunneling"[1] (available from 12.3(2)T), and a PE able to terminate PPP/L2TP and running MPLS at the same time (we are using a 7200 running 12.2(31)SB/Enterprise for this). The L2TP-session is terminated in one VRF on the PE-router and the PPP-sessions are directed into other VRF's based on the RADIUS reply. Yup, you will need a RADIUS- (or TACACS+) server for this. [1] http://www.cisco.com/en/US/docs/ios/12_3t/12_3t2/feature/guide/gtvoltun.html -- Pelle _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
