Page 30 - CHCS - CenturyLink

Enterprise 1 Firewall or SIP ALG
Site 1 • CPE can provide FW and/or SIP-

Enterprise 1 ALG
Site 2 • Cisco ISR-G2 or ASA

Enterprise 2 Centralized Customer FW Ent 1 CUCM – UCxN - CUP
Site 1 • Firewall context per customer Ent 2 Enterprise 1 - Dedicated Instances
• Cat6K FWSM or ASA Mgmt
CUCM – UCxN - CUP
Datacenter Core & Enterprise 2 - Dedicated Instances
Agg Layer Shared Management Components

MPLS VRF-VLAN UCDM – HCM – CUOM – CUSM – vCenter –
VPN Mapping DCNM
Core

NAT in Management VPN
• Required for overlapping addresses
• Performed at PE or CPE in SP NOC

Shared (Extranet)
Enterprise 1 VRF Management VPN

Enterprise 2 VRF Global VPN

30© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30