Greetings,
Wanted to reach out to the community and see if anyone has any resources or suggestions regarding an IWAN v3 design.
Basically what I have is an ASA 5506-X and ISR 4351 going in at a remote site. I am going to have a total of two physical connection.
-MPLS which will terminate to the ISR
-Internet which will terminate to the ASA
However I would like to have three DMVPN tunnels that I can pick from.
-One running over the MPLS
-One running over a hybrid/MPLS VPN which is basically an IPSEC tunnel from the local site to the nearest provider POP
-One running over the Internet all the way back to my data center
I am not exactly sure how to setup the last two (MPLS is up and running and working great). I need to use the ASA to setup the IPSEC connection with the ISP. I understand I don't necessarily need to use the ASA if I am doing DMVPN with the ISR back to my data center.
From a physical connection standpoint, it is very straightforward.
MPLS circuit into the ISR
Internet circuit into the ASA
ASA connects directly to the ISR
ISR connects to layer2 switches (all cisco 2960X).
do I use a trunk/vlans from the ASA to the ISR? If so, how does that make the ISR config look with regards to DMVPN and PfR?
I cannot find any docs on this...so I am hoping someone out there has tried this or knows of a better resource that I haven't come across.
Thanks in advance!
