Dynamic routing over wan links.

mathelizemathelize Member Posts: 66 ■■□□□□□□□□
in CCNP
How do I enable routing protocols across WAN links in this scenario? Like having an office in New York and a branch office in London? Will it work or is it better to implement IPsec VPN and how does the VPN work when both public IP addresses are not on the same subnet? The problem I'm thinking of is how will the routing work when the addresses given by ISP are not on the same subnet or the offices have different ISPs. All these work well in my Lab because the routers are always on the same subnet. Can anyone who has the experience or has implemented this or who knows the best way to go about this please explain?
Thanks!!!
In my Lab
I have access to any cisco equipment I need
· Share on FacebookShare on Twitter

Comments

  • billscott92787billscott92787 Member Posts: 933
    What type of setup do you have between these two sites? Is it a frame-relay connection? What exactly is running to connect the two?


    My guess so far based on the diagram is the best results is going to be an IPSEC Site-to-Site VPN connection. But I'll wait to see what your response is :)
    · Share on FacebookShare on Twitter
  • peanutnogginpeanutnoggin Member Posts: 1,096 ■■■□□□□□□□
    +1 on the site to site vpn. The site-to-site vpn would allow you to send the routing updates over the vpn connection between the sites.
    We cannot have a superior democracy with an inferior education system!

    -Mayor Cory Booker
    · Share on FacebookShare on Twitter
  • ColbyGColbyG Member Posts: 1,264
    To run a routing protocol, GRE tunnels.
    http://blog.alwaysthenetwork.com
    · Share on FacebookShare on Twitter
  • peanutnogginpeanutnoggin Member Posts: 1,096 ■■■□□□□□□□
    ColbyG wrote: »
    To run a routing protocol, GRE tunnels.

    ColbyG,

    That was one of my first thoughts... but something was telling me that GRE tunnels are unsecured... is that true? I can't remember! icon_scratch.gif

    -Peanut
    We cannot have a superior democracy with an inferior education system!

    -Mayor Cory Booker
    · Share on FacebookShare on Twitter
  • networker050184networker050184 Mod Posts: 11,962 Mod
    Correct, GRE is not encrypted, but you can do IPSEC over GRE.
    An expert is a man who has made all the mistakes which can be made.
    · Share on FacebookShare on Twitter
  • mathelizemathelize Member Posts: 66 ■■□□□□□□□□
    billscott92787 wrote: »
    What type of setup do you have between these two sites? Is it a frame-relay connection? What exactly is running to connect the two?


    My guess so far based on the diagram is the best results is going to be an IPSEC Site-to-Site VPN connection. But I'll wait to see what your response is :)

    Nothing in between, just normal internet connections between the sites. Is it possible to run routing protocols over normal ADSL and cable broadband? How would it work when the public IP addresses are on different subnets. A sample configuration would be very appreciated.
    In my Lab
    I have access to any cisco equipment I need
    · Share on FacebookShare on Twitter
  • mathelizemathelize Member Posts: 66 ■■□□□□□□□□
    With some of the suggestions I've seen now. So it's possible to use VPN to link your networks that span various geographical locations together and then implement dynamic routing protocols to update routes. Correct me if I'm wrong please.
    In my Lab
    I have access to any cisco equipment I need
    · Share on FacebookShare on Twitter
  • CyanicCyanic Member Posts: 289
    That sounds about right to me.
    Cy

    http://www.mashtronauts.com
    · Share on FacebookShare on Twitter
  • burbankmarcburbankmarc Member Posts: 460
    These links might help you, but they are GRE over IPSec.

    Configuring a GRE Tunnel over IPsec with OSPF - Cisco Systems

    https://www9.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008019d6f7.shtml
    · Share on FacebookShare on Twitter
Sign In or Register to comment.