CiscoWorks modules for IPSec aware vrf VPNs

[maheshjoshi]

Hi,

Have a requirement to offer IPSec over broadband internet links terminating on shared concentrator(7200 series routers) at central NOC and using VRFs to provide IP isolation between different customers.

I intend to use CiscoWorks (at NOC) as a centralized configuration/device management solution in this environment, managing different client CPE configurations centrally.

Would appreciate information about the different modules needed to implement it, and any foreseeable problem with this implementation.

Best Regards

[amritpatek]

The VRF-Aware IPsec feature enables you to map IPsec tunnels to Virtual Routing Forwarding (VRF) instances, using a single public-facing address. A VRF instance defines the VPN membership of a customer site attached to the Provider Edge (PE) router. A VRF comprises an IP routing table, a derived Cisco Express Forwarding (CEF) table, a set of interfaces that use the forwarding table, and a set of rules and routing protocol parameters that control the information that is included in the routing table.

For the further detail of the VRF-Aware IPsec and VPN follow the link :

http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/3.1/user/guide/vpchap.html#wp1254291