From: Douglas M Todd, Jr (dtodd@PARTNERS.ORG)
Date: Mon Jun 18 2007 - 08:52:23 ART
Ramya:
I would believe that this would depend on a few things:
1) supportability of the design
2) limitations within mpls and nat
3) address space limitations (public/private)
4) basic architecture of your design
5) redundancy
Personally, I would nat as close to the source as possible. This keeps
the tables, rules and access-lists off the core equipment and onto the
ce equipment.
A default route is the easiest way to go and makes things less
complicated when you need to troubleshoot a vpn routing issue.
This is the way we go with our setup.
DMT
Ramya S wrote:
> Hello Tarun,
>
> Thank you for the reply.
> The method you suggested seems to be the best way. I think many big sp's use
> what you suggested . If the vpn customers are using private addresses then we
> can use vrf aware nat. Should we use nat at the local pe router or at the
> remote internet pe router? Which would be a better way to accomplish?
>
> Thanks,
> Ramya Sen
>
>
>
>> Date: Sat, 16 Jun 2007 04:19:27 +0530> From: pahujat@gmail.com> To:
> ramya_1975@hotmail.com> Subject: Re: Internet access for MPLS VPN customers>
> CC: ccielab@groupstudy.com> > Ramya,> The most common way to provide Internet
> access to VPN> customers that I have seen is by providing them with a default
> route. The> VPN provider implements an Internet Vrf where it receives all the
> routes> from the Internet. This vrf also contains a default route generated by
> the> internet gateway. Customer Vrfs import this default default and export
> their> network routes to the Internet vrf for network reachability.> > CCO
> mentions about some other ways of providing Internet connectivity to>
> customers, the following examples talks about using global routing table to>
> provide Internet connectivity.> >
> http://www.cisco.com/warp/public/105/internet_access_mpls_vpn.html> > HTH,>
> Tarun Pahuja> CCIE#7707(R&S,Security,SP,Voice,Storage),CCSI> >
> _______________________________________________________________________>
> Subscription information may be found at: >
> http://www.groupstudy.com/list/CCIELab.html
> _________________________________________________________________
> Want to look great? Get expert opinion on beauty and skin care.
> http://content.msn.co.in/Lifestyle/AskExpert/Default01.htm
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
The information transmitted in this electronic communication is intended only for the person or entity to whom it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this information in error, please contact the Compliance HelpLine at 800-856-1983 and properly dispose of this information.
This archive was generated by hypermail 2.1.4 : Sun Jul 01 2007 - 17:24:49 ART