VPN Config with 7609, IPSec VPN SPA Bundle

[sdasgupta]

Hi,

Please help me to understand and configuring VPN setup to give secure access to my DB & Application Server exist in my Datacenter, to other Service Provider organisation. They need to access those DB & Application Server sitting at their company LAN itself.

My DC Setup :-

1. Core Router 7609 with SPA-IPSEC-SSC400-1 ( Cisco 6500/7600 IPSec VPN SPA Bundle 1 )

2. Core Switch 6513 with FWSM, ACE, SVC ( Network Analyser ), SUP 720

3. Distribution 6509 SUP 720

All the DB & Application Server connected to Distribution Switch in various VLAN

The Server support team from another company need the access to those, for that we will take MPLS link connecting out Core Router.

Please suggest me how to configure the VPN setup taking consideration of security issues, or any other way to do that.

[Marcin Latosiewicz]

Hi,

Were you able to receive any feedback on this?

Please note that VPN SPA supportability with MPLS is quite limited:

http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/configuration/6500series/76ovwvpn.html

If you're not planning to mix VPN and MPLS you could probably for VRF mode or CCA and terminate the VPN on core (although doing so is not the best design choice).

Marcin