<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="OPENWEBMAIL" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
<font size="2">Dear Mr. Momen,
<br />
<br />I believe you are asking the question considering the entire architecture, not just from the customer (Bank) or the provider (SP) point of view. If a bank wants to connect their branch routers in Layer 2 over SP network, the SP has to give them either GRE based tunnels (Mikrotik's EoIP or PPTP-Bridge etc., are common technics) or MPLS Layer 2 (EoMPLS, VPLS etc.). If a bank wants to connect the branch routers in Layer 3 over SP network, the SP can give them anything from simple routing (Static or Dynamic) to plain VRF (i.e. VRF Lite) to MPLS Layer 3 to even dedicated fiber (this is too much though!!).
<br />
<br />To maintain information security and confidentiality, regardless of what the SP is providing in its infrastructure, the bank has to encrypt-decrypt (mostly with IPSec) its traffic in between its routers, which will pass through either the Layer 2 tunnels or the Layer 3 routed paths provided by the SP.
<br />
<br />My question to all is, should banks demand a specific technology like VRF or MPLS or any other from the SP as long as their requirements are met perfectly well by the SP using its current technologies?
<br />
<br />bdNOG mailing list is on the jazz today. Regards to all,
<br />
<br />ANIRUDDHA BARUA
<br />
Email: aniruddha.barua@colbd.com, cto@colbd.com
<br />
Cell: +880.1713.111222
<br />
Web: <a target="_blank" href="http://www.colbd.com/">http://www.colbd.com</a>
<br />
<br />
<br /><b>---------- Original Message
-----------</b>
<br />
From: Abdul Momen <abdulmomen918@gmail.com>
<br />
To: ariful.islam@totalofftec.com
<br />
Cc: nog-bounces@bdnog.org, "nog@bdnog.org" <nog@bdnog.org>
<br />
Sent: Fri, 15 Nov 2013 17:22:33 +1000
<br />
Subject: Re: [bdNOG] Cisco VPN Router
<br />
<br />> Thanks everyone.
<br />>
<br />> I believe it is mostly ipsec (CPE
router) inside GRE(PE router)? Is it possible to get VRF instead of GRE on PE
router.
<br />>
<br />> Thanks & regards
<br />>
<br />>
Momen � �
<br />>
<br />> On Fri, Nov 15, 2013 at 4:37 PM, Arif @ TOTALOFFTEC
<span dir="ltr"><<a target="_blank" href="mailto:ariful.islam@totalofftec.com">ariful.islam@totalofftec.com</a>></span> wrote:
<br />>
<blockquote style="margin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;" class="gmail_quote">I have fortinet wifi router.
<br />>
-arif- <a value="+8801678005123" href="tel:%2B8801678005123">+8801678005123</a>
. Apologies kept short sent from my BlackBerry� smartphone - Airtel
<br />>
<br />>
-----Original Message-----
<br />>
From: Nurul Islam <<a href="mailto:nurul@apnic.net">nurul@apnic.net</a>>
<br />>
Sender: <a href="mailto:nog-bounces@bdnog.org">nog-bounces@bdnog.org</a>
<br />>
Date: Fri, 15 Nov 2013 06:17:25
<br />>
To: <a href="mailto:fakrul@dhakacom.com">fakrul@dhakacom.com</a><<a href="mailto:fakrul@dhakacom.com">fakrul@dhakacom.com</a>>; <a href="mailto:nog@bdnog.org">nog@bdnog.org</a><<a href="mailto:nog@bdnog.org">nog@bdnog.org</a>>; Abdul Momen<<a href="mailto:abdulmomen918@gmail.com">abdulmomen918@gmail.com</a>>
<br />>
Subject: Re: [bdNOG] Cisco VPN Router
<br />>
<br />>
Few more on the [UTF-8?]listŠ.MikroTik, Fortigate, What model? what
else?
<br />>
<br />>
And obviously Cisco. (For the elite class I suppose. :).
<br />>
<br />>
Regards
<br />>
<br />>
-Roman
<br />>
<br />>
On 15/11/13 3:42 PM, "Fakrul Alam" <<a href="mailto:fakrul@dhakacom.com">fakrul@dhakacom.com</a>> wrote:
<br />>
<br />>
>Dear Mr Momen,
<br />>
>
<br />>
>Ya, it's mainly 800 series with K9 bundle. I know few banks who use
1900
<br />>
>series in metropolitan branches where there is higher b/w & pps
<br />>
>requirements.
<br />>
>
<br />>
>Thanks
<br />>
>
<br />>
>Fakrul Alam
<br />>
>
<br />>
>
<br />>
>On 11/15/13, 6:29 AM, Abdul Momen wrote:
<br />>
>> Dear bdnog people,
<br />>
>>
<br />>
>> I have a quick question. What are the commonly used VPN router used
in
<br />>
>>the
<br />>
>> bank brunches in Dhaka. I guess CISCO831-K9 still used in some
places.
<br />>
>> Correct? What are other cost effective alternatives.
<br />>
>>
<br />>
>> Regards
<br />>
>>
<br />>
>> Momen
<br />>
>>
<br />>
>>
<br />>
>>
<br />>
>> _______________________________________________
<br />>
>> nog mailing list
<br />>
>> <a href="mailto:nog@bdnog.org">nog@bdnog.org</a>
<br />>
>> <a target="_blank" href="http://mailman.bdnog.org/mailman/listinfo/nog">http://mailman.bdnog.org/mailman/listinfo/nog</a>
<br />>
>>
<br />>
>_______________________________________________
<br />>
>nog mailing list
<br />>
><a href="mailto:nog@bdnog.org">nog@bdnog.org</a>
<br />>
><a target="_blank" href="http://mailman.bdnog.org/mailman/listinfo/nog">http://mailman.bdnog.org/mailman/listinfo/nog</a>
<br />>
<br />>
_______________________________________________
<br />>
nog mailing list
<br />>
<a href="mailto:nog@bdnog.org">nog@bdnog.org</a>
<br />>
<a target="_blank" href="http://mailman.bdnog.org/mailman/listinfo/nog">http://mailman.bdnog.org/mailman/listinfo/nog</a>
<br />>
</blockquote>
<br /><b>------- End of Original Message
-------</b>
<br />
</font>
</BODY>
</HTML>