VPN

[miracle_david@yahoo.com]

Hi gentlemen,

How can I decide type of VPN that is most appropriate to implement for a customer? DM VPN- GET VPN- FLEX VPN

How much each one cost for customer?

Thanks alot

[balaji.bandi]

It all depends on how the deployment is best based on the requirement, every model has pros and cons.

Best is to engage with Local Cisco partners for a cost-effective solution to offer based on the budget and features.

here is the comparison of VPN :

https://www.cisco.com/c/dam/en/us/products/collateral/ios-nx-os-software/enterprise-class-teleworker-ect-solution/prod_brochure0900aecd80582078.pdf

[miracle_david@yahoo.com]

Thanks for your spectacular reply. I found this " The KS COOP RSA keys must be the same on all KS serving a group, while KS CA RSA keys should be unique." in the following link, page 15. What does it mean?
https://www.cisco.com/c/dam/en/us/products/collateral/security/group-encrypted-transport-vpn/GETVPN_DIG_version_2_0_External.pdf

[balaji.bandi]

This was the use case when you deploying Multiple Key Servers in the network part of High availability.

GET VPN can be configured with multiple Key Server, called Cooperative Server, basically providing high-availability between-group servers.

A Cisco proprietary protocol Cooperative Key Server Protocol (COOP) will be used to elect a master Key Server (KS) that will provide IPsec keys to the other secondary KS that will push policies to the Group Members (GM).

Maximum 8 KS can be configured in COOP mode and is recommended to configure first all KS in COOP mode,
then configure all group members for the registration process.

An important step to configure cooperative mode is to manually import the RSA KEY generated on the Master KS to the other KS,