?

Log in

[icon] dynamic IPSEC solutions - Information Security
View:Recent Entries.
View:Archive.
View:Friends.
View:Profile.

Security:
Subject:dynamic IPSEC solutions
Time:11:09 am
Current Mood:curiouscurious
The CIO at my company recently approached me asking for ways to encrypt ALL data going out over our WAN/between our branch locations. We have recently migrated from a frame relay network to a Metro Ethernet/MPLS combo allowing our remote branches to communicate directly with each other, bypassing the corporate hub. I am looking for something that would allow me to dynamically create IPSEC tunnels between all of my locations on the WAN.

Cisco's DMVPN solution seems to fit what we want, but I'm wondering if anyone else offers a similar solution.


x-posted
comments: Leave a comment Previous Entry Share Next Entry


zastrazzi
Link:(Link)
Time:2007-04-11 10:11 pm (UTC)
We just went with Cisco DMVPN solution ourselves to resolve exactly that overhead issue in connecting a *lot* of remote sites. So far it's handling it beautifully with a variety of link types - satellite, point to point wireless, dsl and fibre.

Basically a hub and spoke design, where the spokes can dynamically build tunnels between each other when needed. I'm not the implementer of this particular project, but the guy who is is pretty happy with it.
(Reply) (Thread)


cracnup
Link:(Link)
Time:2007-04-11 10:22 pm (UTC)
We just put close to a million dollars into a new WAN/VoIP roll out with cisco gear. We're also looking into adding an additional 6500 chassis at our core site. The DMVPN solution ties into the 6500 very well, and that is my preference. I just wanted to make sure I knew of any other possible solutions before I presented to management.

I'm glad to hear that someone's using it successfully and is happy with it.
(Reply) (Parent) (Thread)

[icon] dynamic IPSEC solutions - Information Security
View:Recent Entries.
View:Archive.
View:Friends.
View:Profile.