Layer-2 extension over Internet

[Claudio Battan]

I need to extend some VLANs between two location (the Enterprise DataCenter and a remote DR DataCenter).
The obvious solution is using OTV on two CSR1000v's.
The connection I have to use is the Internet, so the join-interfaces will be directly on the public network.
Question: is OTV traffic somehow "protected"?
Can I implement two IPSEC tunnels between the two CSRs and then pass the OTV traffic through this tunnel?
Is there any configuration example?
Thank you
Claudio

[MHM Cisco World]

what is the Intra DC protocol you use is it VXLAN or it traditional DC?

[Claudio Battan]

NO VXLAN, only "traditional"

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/ip/layer-two-tunnel-protocol-l2tp/116266-configure-l2-00.html

[Claudio Battan]

This is an insecure solution, as the GRE tunnel is not encrypted.
Also L2TP seems a bit obsolet, I would prefer to use OTV with CSR virtual routers

[Maynor_33]

very interesting , good job and thanks for sharing such a good blog.

MyCCPay