Hi,
I'm looking into a backup solution for our primary WAN connections. I was thinking about doing this with VPNs and GRE tunnels through the Internet. All traffic will be tunneled to HQ (no split tunneling) This is all do-able and I've labbed it in GNS and am fairly comfortable with it but, I'm concerned that it will be connected to the Internet. I'm not very familiar with firewalling and the 1002x routers we ordered don't have the firewall license but, since I am only going to be allowing GRE traffic through the tunnel that is using the Internet, could I protect the network from the Internet with access-lists or must I get the firewall license to protect it?
Thank you, Pat.
