WAN Router Connection to Data Center

We have a WAN router that needs to connect to our Data Center network. The Data Center consists of two N7K core switches, with a pair of N5K switches as aggregation, and each N5K has twelve N2K fabric extenders. The N2Ks are single-homed to the N5Ks. The N5Ks are vPC connected to the N7Ks.
We would like to attach the WAN router to both N7K switches in the Data Center. The N7K switches only have 10G ports in them, so we can't terminate the WAN router directly to the N7Ks.
I was considering creating one dedicated VLAN on each N7K, and assigning an SVI to each VLAN, to correspond to the L3 connections between the N7Ks and the WAN router. Then, we could trunk these VLANs to each of the N5Ks, and configure one 1G port on each N5K for the VLAN, and connect the WAN router to the N5Ks.
Two questions regarding this design:
1) Is there a problem in connecting the L3 WAN router to the N7K via the N5K?
2) Does vPC connectivity between the N7K and N5K pose a problem for the proposed WAN connectivity?
Thanks in advance for any feedback.
-rb

The vPC between N5K and N7K is the catch here. Layer-3 routing over vPC member ports is currently not supported so I will advise you to stay away from this approach.
Atif

Similar Messages

WAN and multi-site data center

Dear all
my company have two different data center, one active data center, the second data center is not active, they are willing to go with active - active data center model, i am who responible to design WAN solution,
We almost success to make LAN for both DC act as one LAN data center,
now how to make two different site act as one from WAN prespective,
our WAN devices model is
ASR 1006, 7604 ( in each site)
what are the technologies used for such things
i hope anyone can help

Does anybody have aclue, link , i see 13 view with no replies, if anyone can help

Data Center Connection using ONS 15530

Hi!
1. I am connecting 2 Data Center using DWDM on ONS 15530. The client is GE and planning on running Gigabit Etherchannel.
2. My question is, whish one is better? Using the multirate transponder or GE aggregation card to connect to GE client?
3. Either way, how does client and ONS component interconnect?
- If transponder is used, how does the OADM, OSC, trunk card and transponder connect to each other?
- If muxponder is used, what component is needed ad how does it connect?
4. FYI, I come from ONS 15540 ESPx background where everything connect externally. Apreciate you guys expert response. Thanks.
Rgds
Helme

You have three options:
1/ Use 8 port aggregation card (15530-FCGE-8P) together with 10G ITU card (4 port aggregation card is not cost effective if you are carrying only GE traffic). 10G ITU is the expensive part.
This 8 port aggregation module is connected to 10G ITU module via ONS15530 electrical backplane (not optical); 10G ITU and 8 port module both have 4x 2,5G backplane connections. 10G ITU is connected OADM using external MU-MU optical patch cords.
You can also use 2,5G ITU card but then you can only use 2 ports of the 8 port module card.
2/ Use 8 port multiservice muxponder (15530-MSMP-xxxx), this card has 2,5G capacity and card is SDH/SONET based. DWDM laser is embedded in the card, so this card is connected directly to OADM using external MU-MU optical patch cords (no backplane connections). Remember that this card is 2,5G so if you plan to use only GE you can utilize only 2 ports from the module.
3/ Use Transponders (15530-TSP1-XXX2) as you do in ONS15540. One Transponder - one client signal - one lambda. Transponder is connected directly to OADM using external MU-MU optical patch cords (no backplane connections).
What solution fits best for you depends on how many GE connections you need, what are future needs for more ports, what is your optical power budget, do you need high availability (no single point of failure) etc. Cheapest way to run only 2x GE is using option 2 above.
rgds,
Jp

Should Data Center WAE point to GLBP IP address?

I will be connecting a Data Center WAE-7341 to a distribution layer made up of two 6509s. The 6509s currently have a /30 L3 connection between the two of them on routed ports. I plan on changing that to a /29 SVI connection (changing the ports to switchports) and connecting the 7341 to one of the 6509s' ports configed in the same vlan. (Eventually I'll connect a second, redundant 7341 to the other 6509, same vlan, for redundancy.)
Should I make the connection between the two 6509s a GLBP config, and have the 7341's gateway the virtual IP - but still config WCCP router-list to point to the real IP address? Or should I keep GLBP out of the picture by not configuring it, and pointing the 7341's gateway to the IP address on the 6509 it is connected to - the same as the router-list IP?

Registration
Do NOT use a virtual gateway address (HSRP, VRRP, GLBP)
If you dont specify an IP in the router list is will use the default gateway by default.
If you do use the VIP as the default route, you may see a negative influence when the edge fails over. The DRE cache will be lost as the connection gets reset and initiated on the 2nd WAE. unless your connected to both A and B side routers from Each WAE.

Layer 2 connect - data center web hosting

hi, i need your help!!
i have data center with the nexus 7000 , i have servers connecting to the cisco 7000 with web servers. my company do hosting for customers.
the poing that we have shared resources like vmwares on blades and so on.. mean that the ports of the blade are connecting physically to the nexus 7000 with trunk and vlans for every customers.
my nexus connecting to FW than to WAN stiches than to Routers connecting to the internet so if i asked to to hosting from the internet its easy.
the problem is now i have cusomer that wants to connect his switch over the wan directly to his area at my datacenter.... we make for him servers that are the same like his servers with the same subnet and he makes replications...
he dont have router, he connect his switch over wan provider at layer 2 to me..
should i connect him direcly to my nexus??? with his vlan?? should i need other solution like eompls??? what is the safest way to connect him with layer 2.. and i repeat the problem that our servers are shared between many customers - the same nexus ports, please help!!

Hello,
1.PIX is the precursor to the ASA so at this point the ASA is probably a better choice since it'll be around longer plus I'm sure they have beefed up the base hardware compared to the pix.
2.Your external router is dependant on how much traffic your going to be dropping into your hosting site. A 7200 series router is a fairly beefy router and should be able to handle what you need if your looking.
3.One of the nice things about the 6500 is you can put a FWSM and segment all your different hosting servers to provide a more granular network control.
I don't have any case studys but will look around and post them if I find some.
Patrick

Is there support for a data center Multi-Master using SunONE "Bandwidth Manager" over a WAN ?

I'm not sure what you mean by "data center M-M". There is currently only support for 2 masters. Do you mean
"Is there support for having a managed WAN connection between the two masters?"
This scenario has been tested, but I don't know if it is fully supported by iPlanet. In other words, it should work, but probably not as well as two masters sitting next to each other in a data center, which is the recommended deployment strategy.

Data Center to Data Center Layer 2 connectivity

What would be the best way
to provide layer 2 connectivity between 2 data centers? Sample router configs?
Thanks!!
Gary

What would be the best way
to provide layer 2 connectivity between 2 data centers? Sample router configs?
Thanks!!
Gary
Hi Gary,
Data Center to Data Center can be conencted in diffterent ways like point to point link,over the MPLS or some other means and cofniguration all depend on the connectivity what exactly is with your current network setup.
Check out the below link on Data Center interconnect consideration.
http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/white_paper_c11_493718.html
Hope to Help !!
Remember to rate the helpful post
Ganesh.H

My iPhone says it needs a system restore. If games are connected through game center will I keep all my data?

I plugged my iPhone in to put some music on but it said that there was a problem and couldn't be read properly so it required a system restore. I want to know if I will lose all of my game save data if they are connected through Game Center.

You can try a restore from a backup first. That should have no affect on your data. It is when you do a restore as a new device that you will lose all of your data, game data, etc.

Can i access internet, if I am connected to MPLS Network in my Data Center

I am planning a connectivity to MPLS network of a Service Provider. Do I need a separate internet connectivity or the MPLS connection it self will provide me the access to internet.
The main idea is to provide access to applications hosted in Data center to all the remote users who are working using their laptops and wireless broadband.
Kindl suggest.
Thanks for the support, in advance.

I am planning a connectivity to
MPLS network of a Service Provider. Do I need a separate internet
connectivity or the MPLS connection it self will provide me the access
to internet.
The
main idea is to provide access to applications hosted in Data center to
all the remote users who are working using their laptops and wireless
broadband.
Kindl suggest.
Thanks for the support, in advance.
Hi,
MPLS service provider can do the same check out the below link for more information
https://www.cisco.com/en/US/tech/tk436/tk428/technologies_white_paper09186a00801281f1.shtml
Hope to Help !!
Ganesh.H
If helpful do rate the post

Collapsed Data Center Tier - Best Practice

Hey guys,
I'm working with a company who's doing a Data Center build-out. This is not a huge build out and I don't believe I really need a 2 tier design (access, core/aggregation). I'm looking for a 1 tier design. I say this because they only really have one rack of hosts - and we are not connected to a WAN or campus network - we are a dev shop (albeit a pretty damn big dev shop) who hosts internet sites and web applications to the public.
My network design relies heavily on VRF's. I treat every web application published to the internet as it's town "tenant" with one leaked route which is my managment network so I have any management servers ( continues deployment, monitoring, etc...) sitting in this subnet that is leaked. Each VRF has their own route to a virtual firewall context of their own and out to the internet.
Right now we are in a managed datacenter. I'm going to be building out their own switching environment utilizing the above design and moving away from the managed data center. That being said I need to pick the correct switches for this 1 tier design. I need a good amount of 10gbe port density (124 ports minimum). I was thinking about going with 4 5672UP or 4 C3064TQ-10GT - these will work as both my access and core (about 61 servers, one fiber uplink to my corporate network, and one fiber uplink to a firewall running multiple device contexts via multiple vlans)
That being said - With the use of VRFs, VLAN, and MP-BGP (used to leak my routes) what is the best redundancy topology for this design. If I was using catalyst 6500's I would do VSS and be done with it - but I don't believe vPC on the nexus switches traffic and is really more for a two tier model (vPC on two cores, aggregation/access switch connects up to both cores but it looks like one.) What I need to accomplish sounds to me that I'm going to be doing this the old fashion way , running a port channel between each switch, and hopefully using a non STP method to avoid loops.
Am I left with any other options?

ISP comes into the collapsed core after a router. A specific firewall interface (firewall is in multi context mode) sits on the "outside" vlan specific to each VRF.

Deploying Cisco Overlay Transport Virtualization (OTV) in Data Center Networks

Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about how to plan, design, and implement Cisco Overlay Transport Virtualization (OTV) in your Data Center Network with Cisco experts Anees Mohamed Abdulla and Pranav Doshi.
Anees Mohamed Abdulla is a network consulting engineer for Cisco Advanced Services, where he has been delivering plan, design, and implementation services for enterprise-class data center networks with leading technologies such as vPC, FabricPath, and OTV. He has 10 years of experience in the enterprise data center networking area and has carried various roles within Cisco such as LAN switching content engineer and LAN switching TAC engineer. He holds a bachelor's degree in electronics and communications and has a CCIE certification 18764 in routing and switching.
Pranav Doshi is a network consulting engineer for Cisco Advanced Services, where he has been delivering plan, design, and implementation services for enterprise-class data center networks with leading technologies such as vPC, FabricPath, and OTV. Pranav has experience in the enterprise data center networking area and has carried various roles within Cisco such as LAN switching TAC engineer and now network consulting engineer. He holds a bachelor's degree in electronics and communications and a master's degree in electrical engineering from the University of Southern California.
Remember to use the rating system to let Anees and Pranav know if you have received an adequate response.
Because of the volume expected during this event, Anees and Pranav might not be able to answer each question. Remember that you can continue the conversation on the Data Center, sub-community forum shortly after the event. This event lasts through August 23, 2013. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.

Hi Dennis,
    All those Layer 2 extension technologies require STP to be extended between Data Centers if you need to have multiple paths between Data Centers. OTV does not extend STP rather it has its own mechanism (AED election) to avoid loop when multiple paths are enabled. It means any STP control plane issue, we don't carry to the other Data Center.
    OTV natively suppresses Unknown Unicast Flooding across the OTV overlay. Unknown unicast flooding is a painful problem in layer 2 network and difficult to troubleshoot to identify the root cause if you don't have proper network monitoring tool.
   It has ARP optimization which eliminates flooding ARP packets across Data Center by responding locally with cached ARP messages. One of the common issues I have seen in Data Center is some server or device in the network sends continuous ARP packets which hits Control plane in the Aggregation layer which in turn causes network connectivity issue.
The above three points proves the Layer 2 domain isolation between data centers. If you have redundant Data Centers with Layer 2 extended without OTV, the above explained layer 2 issue which happens in one Data Center carries the same failure to the second data center which creates the question of what is the point of having two different Data Centers if we can not isolate the failure domain.
OTV natively supports HSRP localization with few command lines. This is a very important requirement in building Active/Active Data Center.
Even though your question is related to L2TP, OTV deserves the comparison with VPLS and those comparison will also be applicable for L2TP. The below link explains in detail...
http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps9402/white_paper_c11-574984.html
Thanks,
Anees.

Ask the Expert: Scaling Data Center Networks with Cisco FabricPath

With Hatim Badr and Iqbal Syed
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about the Cisco FabricPath with Cisco technical support experts Hatim Badr and Iqbal Syed. Cisco FabricPath is a Cisco NX-OS Software innovation combining the plug-and-play simplicity of Ethernet with the reliability and scalability of Layer 3 routing. Cisco FabricPath uses many of the best characteristics of traditional Layer 2 and Layer 3 technologies, combining them into a new control-plane and data-plane implementation that combines the immediately operational "plug-and-play" deployment model of a bridged spanning-tree environment with the stability, re-convergence characteristics, and ability to use multiple parallel paths typical of a Layer 3 routed environment. The result is a scalable, flexible, and highly available Ethernet fabric suitable for even the most demanding data center environments. Using FabricPath, you can build highly scalable Layer 2 multipath networks without the Spanning Tree Protocol. Such networks are particularly suitable for large virtualization deployments, private clouds, and high-performance computing (HPC) environments.
This event will focus on technical support questions related to the benefits of Cisco FabricPath over STP or VPC based architectures, design options with FabricPath, migration to FabricPath from STP/VPC based networks and FabricPath design and implementation best practices.
Hatim Badr is a Solutions Architect for Cisco Advanced Services in Toronto, where he supports Cisco customers across Canada as a specialist in Data Center architecture, design, and optimization projects. He has more than 12 years of experience in the networking industry. He holds CCIE (#14847) in Routing & Switching, CCDP and Cisco Data Center certifications.
Iqbal Syed is a Technical Marketing Engineer for the Cisco Nexus 7000 Series of switches. He is responsible for product road-mapping and marketing the Nexus 7000 line of products with a focus on L2 technologies such as VPC & Cisco FabricPath and also helps customers with DC design and training. He also focuses on SP customers worldwide and helps promote N7K business within different SP segments. Syed has been with Cisco for more than 10 years, which includes experience in Cisco Advanced Services and the Cisco Technical Assistance Center. His experience ranges from reactive technical support to proactive engineering, design, and optimization. He holds CCIE (#24192) in Routing & Switching, CCDP, Cisco Data Center, and TOGAF (v9) certifications.
Remember to use the rating system to let Hatim and Iqbal know if you have received an adequate response.
They might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Data Center sub-community Unified Computing discussion forum shortly after the event. This event lasts through Dec 7, 2012.. Visit this support forum often to view responses to your questions and the questions of other Cisco Support Community members.

Hi Sarah,
Thank you for your question.
Spanning Tree Protocol is used to build a loop-free topology. Although Spanning Tree Protocol serves a critical function in these Layer 2 networks, it is also frequently the cause of a variety of problems, both operational and architectural.
One important aspect of Spanning Tree Protocol behavior is its inability to use parallel forwarding paths. Spanning Tree Protocol forms a forwarding tree, rooted at a single device, along which all data-plane traffic must flow. The addition of parallel paths serves as a redundancy mechanism, but adding more than one such path has little benefit because Spanning Tree Protocol blocks any additional paths
In addition, rooting the forwarding path at a single device results in suboptimal forwarding paths, as shown below, Although a direct connection may exist, it cannot be used because only one active forwarding path is allowed.
Virtual PortChannel (vPC) technology partially mitigates the limitations of Spanning Tree Protocol. vPC allows a single Ethernet device to connect simultaneously to two discrete Cisco Nexus switches while treating these parallel connections as a single logical PortChannel interface. The result is active-active forwarding paths and the removal of Spanning Tree Protocol blocked links, delivering an effective way to use two parallel paths in the typical Layer 2 topologies used with Spanning Tree Protocol.
vPC provides several benefits over a standard Spanning Tree Protocol such as elimination of blocker ports and both vPC switches can behave as active default gateway for first-hop redundancy protocols such as Hot Standby Router Protocol (HSRP): that is, traffic can be routed by either vPC peer switch.
At the same time, however, many of the overall design constraints of a Spanning Tree Protocol network remain even when you deploy vPC such as
1.     Although vPC provides active-active forwarding, only two active parallel paths are possible.
2.     vPC offers no means by which VLANs can be extended, a critical limitation of traditional Spanning Tree Protocol designs.
With Cisco FabricPath, you can create a flexible Ethernet fabric that eliminates many of the constraints of Spanning Tree Protocol. At the control plane, Cisco FabricPath uses a Shortest-Path First (SPF) routing protocol to determine reachability and selects the best path or paths to any given destination in the Cisco FabricPath domain. In addition, the Cisco FabricPath data plane introduces capabilities that help ensure that the network remains stable, and it provides scalable, hardware-based learning and forwarding capabilities not bound by software or CPU capacity.
Benefits of deploying an Ethernet fabric based on Cisco FabricPath include:
• Simplicity, reducing operating expenses
– Cisco FabricPath is extremely simple to configure. In fact, the only necessary configuration consists of distinguishing the core ports, which link the switches, from the edge ports, where end devices are attached. There is no need to tune any parameter to get an optimal configuration, and switch addresses are assigned automatically.
– A single control protocol is used for unicast forwarding, multicast forwarding, and VLAN pruning. The Cisco FabricPath solution requires less combined configuration than an equivalent Spanning Tree Protocol-based network, further reducing the overall management cost.
– A device that does not support Cisco FabricPath can be attached redundantly to two separate Cisco FabricPath bridges with enhanced virtual PortChannel (vPC+) technology, providing an easy migration path. Just like vPC, vPC+ relies on PortChannel technology to provide multipathing and redundancy without resorting to Spanning Tree Protocol.
Scalability based on proven technology
– Cisco FabricPath uses a control protocol built on top of the powerful Intermediate System-to-Intermediate System (IS-IS) routing protocol, an industry standard that provides fast convergence and that has been proven to scale up to the largest service provider environments. Nevertheless, no specific knowledge of IS-IS is required in order to operate a Cisco FabricPath network.
– Loop prevention and mitigation is available in the data plane, helping ensure safe forwarding that cannot be matched by any transparent bridging technology. The Cisco FabricPath frames include a time-to-live (TTL) field similar to the one used in IP, and a Reverse Path Forwarding (RPF) check is also applied.
• Efficiency and high performance
– Because equal-cost multipath (ECMP) can be used the data plane, the network can use all the links available between any two devices. The first-generation hardware supporting Cisco FabricPath can perform 16-way ECMP, which, when combined with 16-port 10-Gbps port channels, represents a potential bandwidth of 2.56 terabits per second (Tbps) between switches.
– Frames are forwarded along the shortest path to their destination, reducing the latency of the exchanges between end stations compared to a spanning tree-based solution.
    – MAC addresses are learned selectively at the edge, allowing to scale the network beyond the limits of the MAC addr

I am getting the error "Unable to connect to data warehouse management server" when I try to register it DWMS

I have a Data Warehouse Server that appears to be functioning but is running System Center Service Manager 2010 (w/ out SP1), Also have a functioning Configuration Management Server with Reporting Services Point installed the is running System Center
2012. Both systems are VM's running Windows Server 2008 R2 Enterprise w/ SP1 fully patched. Both systems are running SQL Server 2008 R2 as well. When I try to register the Data Warehouse Server via the GUI using the console or in Powershell it errors
out. Particularly on the GUI with the error "Unable to connect to data warehouse management server". I can browse to it, ping it, get the configuration management reports to run and show my AD assets, etc... but it will not register the DWS. I have
tried every suggestion TechNet has to offer and I am hitting a wall. Can someone please, please, please help!?!

unplug modem and router and reboot.
check setting for network, verify password.
sign in. Enter computer information.
let me know if this works.

TC 2 TB A1409 Wan internet connection no longer working but light is still green?

TC 2 TB A1409 Wan internet connection no longer working but light is still green?
My TC and modem have been up and running for at least the last 2 years without any issues.
It recently started acting up and I would have restart it as I had no internet access. All of a sudden My TC stopped connecting to internet regardless of restart. Utility shows i have no internet connection. I had all the correct green lights on my modem. I figured it might be the modem and connected directly to single ethernet port in modem to my mac book and it worked. When I reconnect modem to TC and restart Modem, TC still shows no internet connection in utility even though I'm getting green sync light on TC.
Help Please.
I'm out of warranty, I have not reset to default yet, Im not sure if I will loose my TC back up data.
please advice
Remy

The Gen4 has some nasty faults.. mostly unrepairable...
If the WAN is gone it becomes pretty well useless at least in its current role as router.
You might still be able to plug it in by ethernet to a LAN port in bridge.
Do try a full factory reset.. always worth a go.
No files will be lost on the hard disk.
The Factory Reset universal
Unplug your TC/AE. Hold in reset. and power the TC/AE back on.. all without releasing reset and keep holding in for about 10sec. The time is not important.. it is the front LED rapid flashing that indicates you are in factory mode.
Release reset.
If it doesn’t flash rapidly you have released reset at some point and try again.
Be Gentle! Feel the switch click on. It has a positive feel.. add no more pressure after that.
TC/AE will reboot after a couple of minutes with default factory settings and will wipe out previous configurations.
No files are deleted on the hard disk.. No reset of the TC deletes files.. to do that you use erase from the airport utility.
Check the ethernet LED is going on.. both on the modem and the TC WAN port.
Do you have any applecare on a computer? If so it might cover the TC.. the rules are complicated but if the TC was bought within 2years before or after the computer it is covered up to max of 3years. You can still get coverage therefore if the TC is over 1 year but less than 2 years by buying applecare now on a computer or an Apple TV which is not too expensive. You can sell off the Apple TV without even opening it.. but use the applecare on it to get your TC replaced.
Only the very first Gen4 will be up to 3years.
Did you have a lightning storm or something btw?? Sometimes the modem can survive and pass the parcel to the TC which seems rather fragile.
There is also a trick to test..
You must have v5 airport utility.. any older Macs, or windows computer you can load on 5.6 utility .. even dual boot/parallels mac.
Go to the WAN setup.. and set the ethernet port to 10mbit half duplex.
Sometimes a damaged port can still manage the slowest speed.. by magic.

URGENT: QoS Design on Data Center MPLS - MediaNet Question...

Hello,
I am posting this in hopes I can get some guidance from anyone who has done this in the field. We have a large enterprise customer with 21 sites all around the world, they have Verizon MPLS and are experiencing QoS related issues on their WAN regarding Video/Voice. We have proposed remediating their network acccording to the Enterprise QoS SRND 3.3 and the new MediaNet SRND to account for Video and TP QoS (
http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/QoS_SRND_40/QoSCampus_40.html )
Here is the problem/question that was proposed in our presales meeting and I honestly don't know where to look for an answer... I am not asking for anyone to design a solution for me, just merely point me in the right direction:
The Data Center has a ~40MB MPLS Connection ( full mesh ) into the cloud ( Verizon )
Site A has a 8MB connection
Site B has a 4MB connection
I know on the Service policy and the interfaces at SiteA and SiteB I can assign "Bandwidth xxxx" and use ~95% of the bandwidth to do queuing and shaping/policing ect. I am not concerned with SiteA and SiteB, that I think I can handle...
Question was posed from the customer, "How can we ensure at the DataCenter level the 40MB MPLS is "chopped" up so that only 8MB of the total speed goes to SiteA ALONG with an attached QoS policy designed for that specific site, as well as ensure only 4MB goes to SiteB with an attached QoS policy.
So I am looking for a way to allocate bandwith per site on the DC 40MB connection going into the cloud ( so that SiteB cannot use more than 4MB ) and attach a MediaNet specific QoS Service policy to that site. The customer does not have seperate MPLS circuits for each site, they all come into the DC on 40MB shared ethernet connection ( no VC, or dedicated circuits to other sites ).
Any thoughts on if this is possible?
Thanks!
Alex

This is an example I have seen and I hope that is useful to you.
Site A
Subnet: 172.16.1.0/24
Site B
Subnet:172.16.2.0/24
HeadOffice:
ip access-list extended Site_A
permit ip any 172.16.1.0 0.0.0.255
ip access-list extended Site_B
permit ip any 172.16.2.0 0.0.0.255
class-map match-any Site_A
match access-group name Site_A
class-map match-any Site_B
match access-group name Site_B
policy-map To_Spokes
class Site_A
shape average 8000000
service-policy Sub_Policy(Optional)
class Site_B
shape average 4000000
service-policy Sub_Policy(Optional)
class class-default
shape average 28000000
service-policy Sub_Policy(Optional)
Interface G0/0
Description To MPLS cloud
bandwidth 40000000
service-policy output To_Spokes
interface G0/1
Description To HeadOffice
bandwidth 40000000
service-policy output To_Spokes
It would be greatly appreciated if someone can correct this or improve it as I am still learning.
Please see the netflow graph from one of our routers using a similar policy as above.

WAN Router Connection to Data Center

Similar Messages

Maybe you are looking for