Cisco DMVPN vs Palo Alto LSVPN (Large Scale VPN) for Inetnet WAN

[dtran]

Hi all,

I am looking into best options for an internet WAN solution leveraging either Cisco DMVPN or Palo Alto LSVPN (large scale VPN) to connect my remote sites. I've got a Cisco network infrastructure with two data centers and 25 remote locations, currently all routing via EIGRP. My Palo Alto environment is currently being used as my parameter firewall and remote VPN access.

Currently each remote site is connected via MPLS and my goal is to bring up a second WAN link using the internet as the WAN transport backbone and ideally I would like to load balance traffic across both links. I'll be using Cisco DMVPN or Palo Alto LSVPN for the second WAN link and I am looking into the Pros and Cons between the two.

Has anyone deployed Palo Alto LSVPN ?

I appreciate any inputs / suggestions !! Thanks all in advance !!

Danny

[Philip D'Ath · Accepted solution]

Never even heard of Palo Alto LSVPN.  Never seen it deployed either.  Perhaps that's a sign of how many people are using it.

All I can say is Cisco DMVPN (now iWAN in marketing speak) is rock solid reliable, widely deployed, very flexible, and works really really well.

[dtran · Accepted solution]

Thanks Philip !! I appreciate the response !!

I know DMVPN has been around for a long time and I agree with everything you said.

Do you know if DMVPN supports full mesh ? or just Hub and spoke ?

You have any docs or configuration sample on DMVPN you can share ?

Danny

[Philip D'Ath · Accepted solution]

DMVPN supports both full mesh and hub and spoke.

This is the link the the validated design guide.

http://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Aug2014/CVD-VPNWANDesignGuide-AUG14.pdf

If you have kit all running IOS 15.4 or better, use the newer iWAN deployment guide instead.

http://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Jan2015/CVD-IWANDesignGuide-JAN15.pdf

[dtran]

Thanks Philip !!

Do you have a high level diagram that shows an overview of the design layout ? I am trying to see what are all the hardware involved and how they are all inter-connect.

Danny

[Philip D'Ath · Accepted solution]

That information is in the validated design guides I posted above.

[dtran]

Cool, thanks Philip !!

Danny