On (2008-08-05 22:14 -0500), [EMAIL PROTECTED] wrote: > In an ethernet scenario, I agree VRF-Lite, dot1q and away we go, but here I > have a cloud in the middle connecting several (20-30) DSL sites to a head > office (hub and spoke), and the thought of having to manage multiple > tunnels (one per vrf), per site is making me cringe..
Yet another solution that was not suggested yet, which doesn't reduce your MTU either is 'vrf select'. Problem with it is, that if your customers can spoof their source address, they can get packets to different VRFs. So you'd need to run uRPF/strict in LAN interface in CE and make sure CE is physically secured. It is ugly hack, that is granted. VRF-lite and multiple PVC's would be my preferred solution. -- ++ytti _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
