• January 26, 2021, 01:25:26 PM
Welcome, Guest. Please login or register. Registration is free.
Did you miss your activation email?

Author Topic: Uplink Change  (Read 2950 times)

0 Members and 1 Guest are viewing this topic.

Offline subnet11

  • Sr. Member
  • ****
  • Posts: 128
Uplink Change
« on: January 11, 2016, 08:10:28 PM »
Hello All,

I have a small question / situation :
Current Network :
2xCore Switch (port 20) --- Fiber Cable  ----Edge Switch (port 48)
Multiple Vlan, DHCP Relay, VRRP etc are all configured on Core Network

Challenge : Let say I want a to replace Fiber Connection with Site VPN, hosted through ISP.
New Situation :
Core Switch connected to Serverroom switch. Firewall Is connected to serverroomswitch and has a Site VPN tunnel to a remote location and terminated to edge switch.

How can I still have everything such as VLAN / DHCP VRRP etc to work just a my current network ? I have an idea, but want to validate.

Should the management VLAN just be replaced so it can reach the Coreswitch and vice versa ?


Offline jamessunday

  • Rookie
  • **
  • Posts: 18
Re: Uplink Change
« Reply #1 on: January 13, 2016, 03:24:34 AM »
you may replace it then have a try.

Offline Telair

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 965
Re: Uplink Change
« Reply #2 on: January 13, 2016, 05:31:50 PM »
Most VPN's are L3 VPN's which means you loose any L2 functions such as VLAN's, VRRP.  There are L2 VPN's (I see them over MPLS circuits a lot), so make sure what kind you have.  If it's L3 then you have a router now at each location.  That router needs to be programmed with the DHCP relay info.  Of course you need two routers to run VRRP at each location.  You also have to deal with distributing your routing table to the new routers.

Offline subnet11

  • Sr. Member
  • ****
  • Posts: 128
Re: Uplink Change
« Reply #3 on: January 18, 2016, 10:36:16 PM »
Hello All,

Thanks. I have the ERS 5000 series. Do these have L2 VPN possibilities ? If not what would you advise ?

P.s. (I am trying to have all features in place, just as I would connect it physically)

Offline subnet11

  • Sr. Member
  • ****
  • Posts: 128
Re: Uplink Change
« Reply #4 on: January 21, 2016, 06:28:58 AM »
Hi All,

I am still searching around but no luck yet. I see that cisco integrate L2 VPN with their switches.

Offline Johan Witters

  • Sr. Member
  • ****
  • Posts: 252
    • BKM Networks
Re: Uplink Change
« Reply #5 on: January 27, 2016, 02:55:46 AM »
Hi Subnet11,

as per my knowledge, the 5500 has no L2VPN features. You would need to check your firewall capabilities, or check the possibilities the ISP can provide on that matter.
Kind regards,

Johan Witters

Network Engineer

Offline Řyvind Nikolaisen

  • Full Member
  • ***
  • Posts: 52
Re: Uplink Change
« Reply #6 on: February 02, 2016, 01:50:51 AM »
It all comes down to what kind of WAN-connection you get through your ISP. If they give you a L2-connection, then you can use it as an extension of your LAN/MAN, and just use L2/L3 capable devices like the ERS5500-series (and all the other ERS-series switches). If they provide a managed L3 VPN, all L3 features will need to be provided on the providers CE-equipment (router).

One thing you may want to start thinking of, given that your provider has an L2-connection, is to set up a SPB network with VSP4000s at the central and remote site. Then you will be in full control of all aspects, both L2 and L3

Best regards,

Řyvind Nikolaisen
Senior Network Architect
NetNordic Communications AS
Avaya ACE Fx #204