cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
689
Views
0
Helpful
4
Replies

GET VPN Clarification

zeuscyril
Level 4
Level 4

                   hi can anyody breif me,

we can use GET VPN on the public WAN or only we can private WAN like MPLS.

if we can use in public wan how to proceed and requirements to proceed?

thnaks

cyril

4 Replies 4

Hello Cyril,

Getvpn is not a good solution over internet as your enterprise subnets are not routable over internet.Also You will have issues while using NAT.

DMVPN is a better solution over the public internet.

Hope this helps

Harish.

olpeleri
Cisco Employee
Cisco Employee

Hello,

GETVPN over internet would work only if:

  1. Your IPV4 subnets [ on the lan side ] are routable on the internet
  2. IPv6 subnets are in use [ bear in mind the GETVPN control channel still use IPv4]

Most likely you might have a look to a solution like ikev2 flexvpn. That's what you might need.

Cheers

DMVPN only works with Cisco devices.  Otherwise, you will have issues if you have devices such as Nokia/Checkpoint.

GRE/IPsec is a much better choice in a multi-vendors environment.  Nokia IP platforms also support GRE/IPSec as well.

Hi,

As mentioned before, due to the IP preservation feature offered by GET VPN, this is not an option if you are planning to deploy this scenario over the Internet,

On the other hand, DMVPN, VTI, Flex VPN and GRE/IPsec offered a better a solution.

Nevertheless, this depends on your needs and what you need to accomplish.

Please chek this out:

Cisco Site-to-Site VPN Technologies Comparison

Cisco IOS FlexVPN Data Sheet


In case you dont have any further questions, please mark this post as answered and rate any helpful posts

Hope to help.

Portu.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: