S2S VPN MEP on Network segmentation firewalls

[Michael_Horne]

Hello All,

I have a need to implement MEP for S2S VPNs.  I have been reviewing the Site to Site VPN Admin Guide. I have concerns that what we want to achieve will not be supported.  The diagrams in the VPN Guide seem to all indicate routing is done in between Host-1 and Host-3 and the secure gateways with the IPsec connectivity:

We are using the security gateways for network segmentation as well as perimeter security with Internet access. It MEP still possible with this topology?

Or if the Internet access is down on M2, will the traffic from Host-1 blocked from reaching M1, while M2 continually tries to reactivate the IPsec tunnel to S1?

Many thanks,

Michael

[PhoneBoy]

What's the connectivity between M1 and M2 in this case?

[Michael_Horne]

Hello,

The connectivity in this specific case is an MPLS VPN cloud. So no direct connecitivity

We want to have the tunnels terminating at to different sites in the US.

Regards,

Michael