Comprehensive data protection for all workloads
Post Reply
wal_ter
Novice
Posts: 8
Liked: 1 time
Joined: Jan 17, 2013 12:53 pm
Contact:

Layer2 Connection between 2 Sites

Post by wal_ter »

Hello,

Scenario: A few VMs are running in production site. If a VM fail I want to failover certain VMs to DR-site. To avoid complex changes in routing i want to connect the sites with layer2. What is the best practise to span a Ethernet layer2 over two sites?

I know there's a solution with MPLS-VPN (VPLS) or a LanLink. Both are dedicated connections which will come with high costs.
Can I span a Layer2 Connection with a GRE over IPsec Tunnel?
Are there any further possibilitys to get a Layer2 through the internet?

Thanks in advance!
dellock6
Veeam Software
Posts: 6137
Liked: 1928 times
Joined: Jul 26, 2009 3:39 pm
Full Name: Luca Dell'Oca
Location: Varese, Italy
Contact:

Re: Layer2 Connection between 2 Sites

Post by dellock6 »

Hi,
over public internet connections you can also use L2TP or OpenVPN, they have both the ability to create L2 networks over L3 routed internet connections.

Luca.
Luca Dell'Oca
Principal EMEA Cloud Architect @ Veeam Software

@dellock6
https://www.virtualtothecore.com/
vExpert 2011 -> 2022
Veeam VMCE #1
tsightler
VP, Product Management
Posts: 6009
Liked: 2842 times
Joined: Jun 05, 2009 12:57 pm
Full Name: Tom Sightler
Contact:

Re: Layer2 Connection between 2 Sites

Post by tsightler » 1 person likes this post

My absolute favorite free Layer-2 VPN is Tinc. I have been using it to build Layer-2 mesh networks over Internet connections for years and it has proven to be robust and reliable. It's a simple SSL VPN that allows creation of full mesh networks of pretty much any topology unlike the hub-and-spoke oriented OpenVPN where there's a central server. This allows it to survive the loss of major nodes while maintaining connectivity of the remaining network nodes.

Don't get me wrong, OpenVPN is great too, and can be configured with multiple servers with some redundancy, and is probably all you need for simple point-to-point, but Tinc has saved the day for me during major storms and network outages many times and I've come to trust it.
dellock6
Veeam Software
Posts: 6137
Liked: 1928 times
Joined: Jul 26, 2009 3:39 pm
Full Name: Luca Dell'Oca
Location: Varese, Italy
Contact:

Re: Layer2 Connection between 2 Sites

Post by dellock6 »

Never knew about it, thanks Tom for the hint, I will try it for sure in the future.

Luca.
Luca Dell'Oca
Principal EMEA Cloud Architect @ Veeam Software

@dellock6
https://www.virtualtothecore.com/
vExpert 2011 -> 2022
Veeam VMCE #1
wal_ter
Novice
Posts: 8
Liked: 1 time
Joined: Jan 17, 2013 12:53 pm
Contact:

Re: Layer2 Connection between 2 Sites

Post by wal_ter »

Thanks for the information.
@Luca: If you say L2TP you mean L2TPv3? I've read that L2TP is only for Client VPNs and L2TPv3 is for connection between locations. Do I need additional encryption for this (like IPsec)?

In summary I can use:
VPLS
LANLink
GRE over IPsec
L2TPv3
SSL VPN

Thanks
dellock6
Veeam Software
Posts: 6137
Liked: 1928 times
Joined: Jul 26, 2009 3:39 pm
Full Name: Luca Dell'Oca
Location: Varese, Italy
Contact:

Re: Layer2 Connection between 2 Sites

Post by dellock6 »

Yes it is that one, I've used it once at a customer, created between two Cisco appliances. We were able to replicate an entire datacenter to its new location, 400km apart from each other, by using Veeam replica jobs (and obviously no network reconfiguration).

Luca.
Luca Dell'Oca
Principal EMEA Cloud Architect @ Veeam Software

@dellock6
https://www.virtualtothecore.com/
vExpert 2011 -> 2022
Veeam VMCE #1
wal_ter
Novice
Posts: 8
Liked: 1 time
Joined: Jan 17, 2013 12:53 pm
Contact:

Re: Layer2 Connection between 2 Sites

Post by wal_ter »

Thank you! That's what i need!
Post Reply

Who is online

Users browsing this forum: widodobudi and 152 guests