Real world scenario

Hi experts, I have a real world question & hoping someone can provide some
advice/guidance. The diagram bellow represents network connection(s) with a
service providers Layer 2 switched network. These connections are Ethernet
and all customer devices have layer 3 reachability between the Hub router
and the Branch routers. Here are my questions and concerns;

What is the best way to run a "secure" BGP connection(s) between the HUB
and the branches B1 and B2? Assuming each branch and Hub will be in its own
private AS. Also, the ISP does not take part in any routing. This might
sound simple, just running p2p BGP sessions between the Hub and the
branches and using IPSec to secure the data plane. But is there a better
way to do this?

   HUB

       |

 ___|___

|__ISP__|

  | |

  | |

  B1 B2

Thanks,
J

Blogs and organic groups at http://www.ccie.net
Received on Fri Jul 19 2013 - 14:54:11 ART