Solved

network layout

Posted on 2013-11-09
3
226 Views
Last Modified: 2013-11-14
Hi experts,

I have 3 sites which are in different countries, same company; Asia (1), US (LA and NY). Each site has internet connectivity.

I was thinking to create a VPN site to site between Asia and US (LA) then have a VPN from US (LA & NY).

This means when Asia needs to go to NY - it will pass through to LA before going to NY.


The main goal is to have a stable tunnel and I believe that NY is too far from Asia that it will create packet loss. I understand the risk if LA went dark that I wont be able to reach NY and I'm okay with this.

Thoughts?
0
Comment
Question by:gsmith888
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 9

Expert Comment

by:gt2847c
ID: 39636367
Depending on your traffic load, you may be making your LA unit do a lot more work than it needs to.  We have tunnels between the US East coast and India, China, etc.  The round trip time runs to 300 ms in some cases which makes VoIP impractical, but for normal data usage (Exchange, Lync, SAP, etc), we don't have any significant problems with it.
0
 
LVL 17

Accepted Solution

by:
surbabu140977 earned 500 total points
ID: 39636490
today's connectivity is very resilient to faults and the max performance degradation can be a little bit latency, but you can overcome with a good type of circuit. (AVPN and VPLS are good now a days between Asia-US)

You have 3 sites, so for full fault tolerance you should be running a) full mesh connectivity i.e every site should be connected to other 2 and b) run a routing protocol over GRE to take care in case one site goes down.

If you have preference then you can run policy routing to tell which site is preferred over the other and in case the primary site fails, traffic would shift to the other. Or you can manipulate the metric of your routing protocol to choose which path is preferrable.

Best,
0
 
LVL 6

Expert Comment

by:iradatsiddiqui
ID: 39636675
Please use the star connectivity (connectivity between all sites directly means site to site vpn between all the sites.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…
Suggested Courses
Course of the Month4 days, 5 hours left to enroll

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question