VPNs and Vlans

[l0st_bitz]

HI all,

We are in the process of deploying a large vpn hosting infrastructure. We are solid on the clustering/isp redundancy but are having a hard time finding detail on how to create the route based vpn tunnels.

The way we want to design the system is to split the internal lan interface into multiple vlans. One vpn tunnel will be associated with a vlan. Each tunnel will have it own external address routed with BGP. See pic for details.

What we need to know is how do we keep each vlan segregated from each other and provide static vpns into each? Is this possible? Are we able to configure BGP to provide this routing?

Thanx

[mcnallym]

Check Point VSX, is what you need for this. Multiple Firewalls running on a single box, each firewall is logically seperate.