security architecture

[saquib.tandel]

Hi

Parent company looking for feasible study on merging two companies common IT services when moved to new building and ensuring security is maintained. Company#1 is around 300 users with 25  remote offices and company#2 are around 350 users with 40 remote offices

common services in the same building could be telephony,wireless, core , single datacenter

BIG Question - on sharing core / wireless will impact security and what should be the design architecture for both companies.

any ideas are welcome

thank you

ST

[Marwan ALshawi]

I would say the best more scalable solution is to make you core mpls enabled and the distribution like PE in service provider network where each vlan from the access goe to a specific VRF in distribution and you run mp bgp over the mpls core

By using rt with vrf and mpbgp you put shared services in vrf that is accessible by both companies

If mpls in the core not an option use end to end vrf you may use gre or mgre if you you are using 65k

Each vlan from access go to it's company vrf in the distribution

Route leaking can be done for the common services

Hope this help

[Marwan ALshawi]

for more details and concepts check out the link below

http://www.cisco.com/en/US/docs/solutions/Enterprise/Network_Virtualization/ServEdge.html

hope this helps