We talked about 880s, but the environmental operating rage of nonoperating temperature -4 to 149F is not that promising give that we are in Florida :-) and these parking gates are exposed outside and in a mental box.
Schilling On Tue, Apr 13, 2010 at 10:29 AM, Luan Nguyen <[email protected]> wrote: > You could use EZVPN client on those 880 ISRs if you choose to go the > "client" way. > From what I heard, it's hard to get ASA these day. If I am in your shoes, I > would use dual ISR2 routers (for redundancy) such as 2911 instead of ASA and > 880s to form a dual hub DMVPN/IPSEC cloud. > 30 CPEs DMVPN shouldn't be a concern provisioning/managing wise. > > > ----------------------------------- > Luan Nguyen > Chesapeake NetCraftsmen, LLC. > --------------------------------- > > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of schilling > Sent: Tuesday, April 13, 2010 10:09 AM > To: cisco-nsp > Subject: [c-nsp] Remote Parking Gates VPN to Campus Network with 3G > > We have a project of connecting 30+ remote parking gates to our PCI > private network(MPLS L3VPN in our case). These parking gates will not > have direct ethernet connection, nor within our campus wireless > coverage. So we are thinking of using 3G celluar network like Verizon, > ATT etc to have network connection, then using VPN to tunnel the > traffic from these gates to our existing PCI private network. > > If we have a dedicated ASA, we could do LAN-to-LAN tunnel with either > Cisco ISR 880 3G or any Digi WAN VPN family, but we are concerned > about the provisioning and managing over 30 LAN-to-LAN tunnels. And > shared ASA will not be able to isolate the traffic to PCI private > network. > > Is there any device which can do integrated VPN client and 3G? EOS > Cisco 3002 VPN hardware client could do the first requirement, but not > the second one. > 3G requirement is obvious. The reason for integrated VPN client is for > easy management and traffic steering. If we can have a VPN client on > the device to initiate a VPN connection to our Cisco VPN server, then > NAT LAN connection thru the obtained VPN address, We just need a VPN > group for all of these parking gates. If we use Lan-to-Lan tunnel, > then the management overhead is much higher compared with VPN client. > Doing VPN client, we can use our existing VPN server to steer the > traffic thru the MPLS L3VPN for PCI client with PIX/ASA: Multiple VPN > Group Clients to use Different VLANs after Connecting to a Security > Appliance Configuration Example. > > Any thought on any device with integrated VPN client and 3G? Or what > will you do with similar project? > > Thanks, > > Schilling > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > > __________ Information from ESET NOD32 Antivirus, version of virus signature > database 5024 (20100413) __________ > > The message was checked by ESET NOD32 Antivirus. > > http://www.eset.com > > > > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
