Design recommandation for using VPN or SD-WAN

[John.Mayer]

Hello Everyone

Actually, I have a below network and looking for the best way to configure the spokes connection (ISR Routers) to my single hub

(Cat8000v)

I would be appreciated if I could use your experience to choose the better topology.

Two different technology comes to mind, 1)using

IPSEC

Tunnel for traffic encryption and EIGRP for traffic handling. --> cost-effective, easy to manage and implement  2)

SD-WAN

expensive, better visibility and management over traffic, easy to expand

Note: at the moment I only have one spoke and in the future, it will be to three sites. 

[balaji.bandi · Accepted solution]

if it is less than 5 over all not more sites, then i would suggest to stick with

IPSEC

and easy way to configure and less cost wise

if you have budget to deploy

SD-WAN

you can go for it.

[John.Mayer]

thank you Balagi

You mean that instead of

DMVPN

just create two separate

IPSEC (IKEv2)

tunnels and use the EIGRP routing to handle the traffic in case of tunnel failures? 

I have to note that, currently I have only two spokes.

Thanks, John

[Giuseppe Larosa]

Hello @John.Mayer ,

I think that @balaji.bandi was meaning that if the number of sites is low you can use

DMVPN

rather then going to use

SD WAN

he used the word IPsec but that includes also

DMVPN

Hope to help

Giuseppe