IPSec-to-MPLS VPN mapping
Does anyone have some advice on implementing an ipsec to mpls vpn solution? I am attempting to create a solution where an offnet customer of the ISP I work for can use an ipsec vpn to connect and map to their own mpls vpn instance within our network.
Cisco has a solution for this, but it uses the Cisco IP Solution Center rather than the CLI.
I am looking for the equivalent CLI version.
Any comments from someone who has implemented this scenario either with or without the ISC would be appreciated.
Cisco has a solution for this, but it uses the Cisco IP Solution Center rather than the CLI.
I am looking for the equivalent CLI version.
Any comments from someone who has implemented this scenario either with or without the ISC would be appreciated.
Comments
-
mikej412
Member Posts: 10,086 ■■■■■■■■■■
The VRF Aware IPSec doc may be what you want.:mike: Cisco Certifications -- Collect the Entire Set! -
mwgood
Member Posts: 293
mikej412 wrote:The VRF Aware IPSec doc may be what you want.
Excellent! That is exactly what I'm looking for.
This document may take some adapting since it discusses terminating the IPsec tunnel on a PE, whereas I'm thinking of implementing Cisco's "two-box" solution with a multi-vrf CE instead of using one of our PEs to terminate the VPN. It should be doable though, thanks.