From: Chris Lewis (chrlewiscsco@gmail.com)
Date: Thu Mar 02 2006 - 18:54:05 GMT-3
Tim,
Over the years Cisco has done a lot of work validating hardware and software
configurations for this purpose. We have even certified which providers meet
the requirements necessary to make a site to site voice deployment over
IPsec work properly. This work has been done under the name of V3PN,
standing for voice video and data over IPsec VPN. A marketing description is
available at
http://www.cisco.com/en/US/products/ps6661/products_ios_protocol_option_home.
html
The 160 page SRND with configurations is available at
http://www.cisco.com/application/pdf/en/us/guest/netsol/ns241/c649/ccmigratio
n_09186a00801ea79c.pdf
Chris
On 3/2/06, Tim <ccie2be@nyc.rr.com> wrote:
>
> Thanks guys for the feedback and recommendations. I thought it should
> work
> but never tried it and didn't know for sure.
>
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Venkatesh Palani
> Sent: Thursday, March 02, 2006 1:14 PM
> To: Tim
> Cc: ccielab@groupstudy.com
> Subject: Re: voip over VPN
>
> Hi Tim,
>
> I have worked on one of those designs thatr run IP TEL over IPSEC, for qos
> use pre classify I dont think using ISR are a bad choice. I used GRE and
> IPSEC and it wasnt that bad. actuallhy I tried them between asia and US
> and
> it was OK, most of the delay come with ur SP changing their peerig or
> redirecting their traffic. any way running VOICE over internet using IPSEC
> is a cheap solution but it is has numerous external dependencies.
>
> Some of my personal recommandation
> 1. use a Signle SP for all your site so your traffic is kept within the
> same
> network as for as possible. soem of the Asia SP peer in US which makes the
> ASIA -ASIA traffic pretty hard
>
> 2.USE pre qulaify
>
> 3. try avoiding split tunneling as the internet downlaod could swamp your
> voice
>
> 4. USe ISR routers
>
> 5. use Codec 723 where possible
>
> 6. use some sort of monitoring system to monitor delay and latency or/and
> use IPSLA to fall back to gateway incase of huge latencies
>
> ...
>
> HTH,
>
> Venkatesh
> On 3/3/06, Tim <ccie2be@nyc.rr.com> wrote:
> >
> > Hi guys,
> >
> >
> >
> > Does anyone have any experience with running voip over a site-to-site
> > IPsec
> > VPN?
> >
> >
> >
> > Assuming the voice traffic is prioritized as it ought to be and the
> > connection to the wan cloud is big enough, does the VPN processing slow
> > down
> > the voip traffic to the point where people used to toll quality voice
> > would
> > consider it un-acceptable?
> >
> >
> >
> > I'd appreciate all your thoughts and comments.
> >
> >
> >
> > TIA, Tim
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sat Apr 01 2006 - 10:07:37 GMT-3