Disadvantage of layer 2 vpn for service provrider perspective

hello everybody
i wouldlike to know the main advantage and disadvantage of layer 2 vpn deployment for service provider perspective compared to layer 3 vpn regarding security, configuration, troubleshooting, flexibility.
is there difficulty for controlling and policing traffic in layer 2 vpn vs layer 3 vpn?? for exemple can i filter layer 4 tcp port (telnet traffic) in llayer 2 vpn tunnels or vpls???
thank you

Not too sure how to answer that as they're used in different manners, what are exactly your doubts? What do you think to use them to? What do you imagine your customers need?
Just so I understand, why would you filter telnet traffic inside an L2VPN?

Similar Messages

  • FabricPath & Layer-3 VPNs (VRF) between 2 Data Centres

    Hi there,
    I'm looking at deploying FabricPath for layer-2 extension between 2 Data Centres.
    We also have the requirement for providing layer-3 services between the 2 DC, as in Layer-3 VPN (MPLS VPN).
    The alternative technology was MPLS, with full blown Layer-3 VPN, and Layer-2 VPNs through AToM or VPLS.
    My question is, how can we provide VRF support over FabricPath?? Can we use 2 routers with VRF lite configuration in each DC, then dot1q on the trunk through the Fabric Path? Or just VRF Lite on the layer-3 terminating routers, with a specific VLAN for interconnecting the different VRFs?
    Thanks,

    Fabricpath is L2; not related to the L3 technology you want to use; if VRF are in use you can just use VLANs which is described in your first scenario : "use 2 routers with VRF lite configuration in each DC, then dot1q on the trunk through the Fabric Path"

  • IPv6 Multicast support for service providers 6PE / 6VPE

    Hi,
    Can anyone comment on the current state of development for IPv6 Multicast support for Service Providers who are using 6PE or 6VPE in their MPLS core.
    (6PE - SP is running MPLS in its IPv4 core, it uses IPv6-enabled provider edge (PE) routers to transport IPv6 traffic over an IPv4-only enabled core. 6PE does not support VPN,s it just provides a mechanism for tunneling IPv6 packets from ingress PE to egress PE routers)
    (6VPE - refers to a PE router capable of supporting IPv6 VPNs. A 6VPE solution can be used to provide IPv6 based layer 3 VPN services in a similar way to IPv4 based Layer 3 VPN services.)
    My understanding is that 6PE and 6VPE solution are unable to support IPv6 multicast traffic.
    Any further information on configuration, design or development work in the pipeline would be gratefully received,
    kind regards John

    Hi John,
    From our question I understand you are sking about the MVPN support for IPv6 multicast. It is actually supported on the XR platform as of now. Please refer:
    http://www.cisco.com/en/US/docs/routers/xr12000/software/xr12k_r4.0/multicast/configuration/guide/mc40mcst.html#wp2890031
    I hope this helps.
    Regards,
    Ruchir

  • Azure VPN or not to VPN for Site recovery

    Use the VPN option.
    Don't use ASR for Domain Controllers.
    Instead stand up 1 or 2 small VMS in Azure and promote them to be DCs once the VPN is up. That way you'll have a functioning Domain already in Azure if the worse happens and all your local servers drown in a flood.

    Any advantage or disadvantage to using a VPN between on site network and Azure?
    I want to use Site Recovery to replicate my VM's into Azure.
    Seems you don't have to setup a VPN and I'm wondering which option I should go for.
    Thanks.
    This topic first appeared in the Spiceworks Community

  • Good, cheap VPN for personal use?

    I want to start using a VPN for home and when i use my PB at hotspots. Don't want to spend alot per month. I've heard of a couple VPN services like VforVPN and hotspot VPN. Anyone have experience with these or any other suggestions?
    thx
    lenn

    witopia VPN is extremely fast. i have a fios fiber connection and I don't even notice when it is on. amazingly, it actually seems to increase my upload speed too. I use Skype with it a lot, and again, it actually seems to improve the voice quality. I've used it since 2005 and it's been very reliable. best of all, it's only $40 for openVPN AND a PPTP account (I use on my iPhone). Not sure why it's so much less expensive, but who cares?

  • Dynamic Layer 3 VPNs with Multipoint GRE Hardware Support

    Hello.
    Cisco feature navigator says that only ASR9000, 7500 and 7200 support this feature but in the following link http://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/layer-3-vpns-l3vpn/116725-configure-mgre-00.html#anc7 Cisco refers 7600 platform.
    Does anyone know if this feature is supported by 3900 family?
    Thanks,
    João.

    Hello.
    The feature is supported in "S" train only, that is not available for 3900 routers.

  • Airport Express not showing in iTunes with Cisco VPN Client Service Running

    As soon as I stop my VPN Client Service in Services... the AX instanly appears in iTunes... If I restart the service AX can't be found. Does anyone know a workaround so they can co-exist on an XP machine?

    Yes, that is called "split tunneling" and is a feature, if you will, of the Cisco VPN (hardware and your VPN client). Unless "split tunneling" is enabled AT THE SERVER, all of your traffic will flow through the VPN, including that meant for your local AX.
    If you had an ethernet printer, as I do, you'd also find you couldn't print while on the VPN.
    The intent is to protect your company's internal network from anything that might be on your computer (say, malware trying to phone home or do other nefarious stuff).
    Really, there is not much you can do, other than ask your IT folks to enable local LAN access for you.

  • MPLS layer-2 VPN

    Hi,
    1. what's MPLS layer-2 VPN? it just provides layer-2 services, like traditional frame-relay/or ATM service.
    2. How to implement?
    thanks /difei

    Hi,
    1- Yes. It provides Layer 2 services over MPLS.
    2- It is now supported on a few platforms . You can find many documents , if you search as ATOM ( Any Transport Over MPLS ) on Cisco.com.
    Regards

  • Internal Dual-Layer DVD Writer for Tecra M1

    Hi,
    Does anyone know of a suitable internal dual-layer DVD writer for the Tecra M1?
    Thanks,
    Colin

    Hi,
    check this site and you will find some proper information about Tecra S1 and DVD Writer!
    http://eu.computers.toshiba-europe.com/cgi-bin/ToshibaCSG/selected_product_option.jsp?service=EU&PRODUCT_ID= 102102&DISC_MODEL=0&toshibaShop=reseller
    Bye

  • VPN for xbox 360

    I have an airport express that transmits my wifi signal to my macbook pro and my xbox. I'd like the signal to be VPN protected. I have a hideipvpn account which works fine on my macbook. But the moment I try to transmit it to the xbox it fails. The internet just gets blocked. Is there a way to enter a VPN setting into the airport express itself so that all devices connecting to the signal are getting a VPN protected signal?

    Simple answer: no, you can't have the Airport do that.
    What you re looking for is for the router to be a "VPN endpoint". Basically, to have the VPN client software built-in to the router. What type of VPN being used will matter since you can't normally install anything directly into the router like you would on a Mac or PC. So whether that can be done will depend on what HideIPVPN is using. I don't use that service but I'll guess that unless HideIPVPN uses a "common" VPN protocol like PPtP or L2TP, you're probably not going to find a VPN endpoint router that will work.
    The only workaround I can think of is to use your Mac to share it's internet connection to the xBox. That way all network traffic has to go through the Mac, which is connected to the VPN. I don't know if you can do that all wirelessly. You may have to attach the xBox to the Mac by wire. I know that's probably not what you were thinking, but if you're that paranoid that you need the protection of VPN for your xBox, then taking your xBox off of Wi-Fi is better security anyway.

  • BAPI Error: No account assignment exists for service line 0000000000

    I am using BAPI : BAPI_PO_CREATE1 to create a PO.
    I am getting this error while creating PO  "No account assignment exists for service line 0000000000"
    Please help.

    Yes...
    for each item i am creating one parent service record and one child service record with REQUISITION_SERVICES.
    the Package no for parent is the subpackage no for child.
    also for each item, I fill REQUISITION_ACCOUNT_ASSIGNMENT and REQUISITION_SRV_ACCASS_VALUES
    Still I get the Error.
    Thanks to help me resolve.

  • Free Goods check box in PO, for Services

    Hello,
    Is there any way to activate the Free goods checkbox for Services (item category 'D') in Purchase Order.
    This field seems not to be available in the screen layout.
    Your support is highly appreciated.
    Regards,
    Vijay.

    Hi,
    Per SAP Note 0000634395, activation of Free Goods Check box for services in not possible.
    Though there is an option to make the services unaccountable, by marking the service as contingency item in the service details from the services tab.
    The subitem total is the aggregate of the subitem net values. This subitem total excludes subitems marked as contingency or alternate lines.
    Please refer to the link provided;
    http://help.sap.com/erp2005_ehp_04/helpdata/EN/8d/7638d98f3f11d2b47f006094b93006/frameset.htm
    Regards,
    Sekhar.

  • Creation of EBP Purchase Order for Service Products in MM

    Hello all,
    i have created the service master in MM system and then i have replicated the service master to EBP later i tried to create a EBP PO for Service Products through Sourcing from EBP to MM.
    But i am getting a failure message as "Error during determination of  backend document follow on documents for shopping cart " and PO is not created anyway.
    But i can create PO for Materials with the same process.
    I am getting this message only during creation of PO with Service Products.
    I request you if any body has the solution please post your valuble information as early as possible.

    Mahesh
    What I understood from your case is you were able to create PR in backend for service items when you assign vendor manually durin g SC creation.
    In that case definitely it will create PR instead of PO in backend. Because when a vendor is assigned manually during SC creation. that vendor is treated as desired vendor and not fixed vendor. So it gives suggestion to buyer, who converts PR to PO, to use this vendor.
    When a desired vendor is assigned manually, SC is treated as incomplete. SC is complete only when source of supply is assigned automatically.
    If you want that desired vendor to be treated as fixed vendor you need to maintain the same in BADI BBP_DOC_CHANGE and method BBP_SC_CHANGE.
    If PO is to be created directly(Without BADI logic) make sure vendor is assigned automatically in source of supply section of SC. This  can be possible by maintaining vendor list in SRM or maintain a Contract for that product in backend so that system will pick that source automatically.
    Try this and see what document is created in backend.
    PS:Reward points if the solution is helpful to you.
    Regards
    Jagadish

  • I took my computer in for service just before the warranty expired now I have one question and can't get any help. The sound buttons on my keyboard no longer work

    I installed the new Mavericks update on my MacBook Pro when it was released and offered free of charge. After that my computer started crashing on a regular basis, upon the realization that my warranty was due to expire at the end of the year I took my computer in to the Apple Store in Green Hills Mall about 5 days before Christmas. To anyone not familiar with Green Hills in Nashville TN the traffic is horrendous at all times let alone 5 days before Christmas. They had to send it off for service and it was shipped back to me on Christmas Eve. Through the holidays I haven't used it much. I usually just use it at work between customers and most of the time just leave it here. Friday evening I played videos with no problems, when I came back in on Monday and played a video the sound had decreased dramatically and the volume control keys on my keyboard would not work. I don't know if they were working before because I don't remember if I used them or not since Monday was the first time the volume was so low. Now my warranty is expired and I am very poor ( The I have a job, a roof over my head and food to eat but a negative balance in checking account and bills still to pay kind of poor) so I am hoping that someone out there knows what's causing this and how to fix it.

    Mavericks has had a lot of compatability issues and are slowly being fixed.  This is why I haven't upgraded yet.
    Either downgrade back to Mountain Lion or just wait for a software fix.

  • I cancelled my service, was charged for service which was not provided, and I am unable to find a way to dispute or to pay my bill.

    To begin, what ADA-compliant options are available to work with a service representative? I've never found the online chat service support to be available during my waking hours after checking over the last week. I can't find a contact email for support, either. I've been instructed on several occasions that I will need to make a voice call for customer service, but unfortunately, this will not be possible. I will require text-format assistance from customer support to address two issues which I am unable to solve on my own:
    1) I was charged for service following the cancellation of my service; this includes a period following cancellation during which no service was provided. After working with a representative in person, I was told that my final bill would be adjusted to reflect the legally billable amount. This was three weeks ago and I haven't received a response, and I haven't been able to find a way to pursue a resolution - What can I do to help move this process forward?
    2) It appears I will be unable to pay my bill after this dispute has been reviewed. My phone number is no longer with Verizon. The online bill payment login requires a phone number - I have never been provided with any other account number. Unfortunately, Verizon appears to close access to online bill payment when the phone number is transferred, even to accounts with unpaid invoice amounts. How can I pay my bill online?

    kananga wrote:
    To begin, what ADA-compliant options are available to work with a service representative? Good question, and one that I don't know the answer to.  Does anything on this page help? Products & Services Overview | Verizon Wireless
    1) I was charged for service following the cancellation of my service; this includes a period following cancellation during which no service was provided.  Service is normally billed through the end of the billing cycle, whether service is provided or not.  "Cancellations will become effective on the last day of that month’s billing cycle, and you are responsible for all charges incurred until then." After working with a representative in person, I was told that my final bill would be adjusted to reflect the legally billable amount. According to their legal docs, the "leagally billable amount" is through the end of the billing cycle. This was three weeks ago and I haven't received a response, and I haven't been able to find a way to pursue a resolution - What can I do to help move this process forward?
    2) It appears I will be unable to pay my bill after this dispute has been reviewed. My phone number is no longer with Verizon. The online bill payment login requires a phone number - I have never been provided with any other account number. Unfortunately, Verizon appears to close access to online bill payment when the phone number is transferred, even to accounts with unpaid invoice amounts. How can I pay my bill online?  You cannot pay online once the account is cancelled.  You will be mailed a paper copy of the final bill, and you can mail a check, or possibly call in and pay over the phone.  But online is no longer an option once the account is cancelled.

Maybe you are looking for

  • Item not shown for clearing

    Hi everyone, I have a question for you concerning strange behavior of the clearing for vendor accounts. This is what it is about: I have a vendor let's say 12345. On this vendor's account I have two postings. One is posted with doc type KR (Vendor In

  • MATERIALIZED VIEW BECOMES INVALID AFTER REFRESH

    Hello All, I have wierd problem , In my enviroinment we have a MATERIALIZED VIEW ,which is refreshed by a sheduled DBMS_SNAPSHOT.REFRESH Job post the refresh it becomes invalid and every time we have to compile it manually ,Could anybody help with a

  • What am I seeing?

    I have an Aperture library consisting of several thousand scanned slides. The EXIF data for these files shows the date on which the scans were made, as expected. For cataloging purposes, I manually enter data in the IPTC Core metadata, including "Dat

  • Itunes will not recognize devices

    just upgrades to itunes 11 and it will not recognize my devices

  • IPod Setup & iTunes Problems

    Hello, whenever I try to install the setup and iTunes for my recently purchased iPod mini I get an error when it is configuring the InstallShield, I get this error: 1608: Unable to create InstallDriver instance, Return Code:-2147221021 I thought this