L2 over L3 VPN

[infosateng]

Hello Experts

I want use a VPN as failover to a Layer 2 circuit, and I'm familiar with DMVPN, so to use DMVPN per VRF looked like a good solution, but on the MPLS VPN Design  guide that I read its says that the total number of VRFs should be 3 or less.  Can you tell me if it could handle 5 VRFs or even 10.  I'm going to use a 2901 Router with Security IOS.  If having more than 3 VRFs is a bad idea, what do you recommend for someone with no MPLS experience.

[adawa]

Hello, infosateng. Let me check for a reference here that may help you. Is this for your existing 2901 router, by the way? Feel free to e-mail me (adawa@cisco.com) for additional concerns. 

[infosateng]

I have 2 new 2901 Routers that I will use for this VPN.  IOS 15.2(4)M5.  I'm still at the design stage.

[adawa]

Hello, infosateng. The recommended maximum number of VRF instance for 2900 routers (including 2901) is 45 with 24 Mbps of recommended throughput. Check the link below to verify: 

http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/multiprotocol-label-switching-mpls/prod_white_paper0900aecd8051fbdc.html

Kind regards. 

[infosateng]

Thanks.

I didn't see anything with reference to DMVPN per VRF in this document, and what License would I need.

[adawa]

Do you already have a Data license and IP Base feature set for your 2901 router, by the way?