How to deal with Ethernet Handoffs

[n0speed]

I am faced with 3 Ethernet links I will need to route to. 2 of them are for internet one being a Comcast Business Class link and then a shared T1 Fallback that comes out of a manage router along with a MPLS link that comes from the same router separate cable. I guess this is the new thing but I am not use to dealing with all these Ethernet links. Right now I am looking at some kind of Cisco ISR with Ethernet HWICs to handle the Ethernet hand offs and then the 2 built in GB ports for my switch up-links. How far off am I or is there a better way

D

 

[unclerico]

A single ISR to terminate all three circuits?? Too many eggs in one basket IMHO. Where does your firewall go in this design?? Who's idea was it to terminate an Internet connection on the same CPE as the MPLS circuit??

 

[n0speed]

It is a small medical office the MPLS is thru the application provider I think the offer the split T1 as a selling point to people who have no internet and I am tempted to not use it since I have a 30MB comcast line. Right now I am thinking a L3 switch to terminate the connections then route the traffic to say a 2901 to handle my NAT and incoming VPN connections.

 

[unclerico]

That MPLS circuit needs to go behind a firewall. Terminate the Comcast circuit into the 2901 and then hang a switch off the inside of the 2901 to terminate the MPLS. You should enable and configure the ZBFW (assuming you purchased the license for it). You could also go with the L3 switch to terminate the handoffs, but again, get that MPLS circuit behind a firewall. I'd be interested to see if the service provider is using multi-vrf CE to keep the routing tables separate or if they are just throwing it all together into one global routing table. As for whether you use the T1, I would say it is up to the client that you are building this for as they are paying for it and may want to get their money's worth.