The client is a large Japan based Application Service Provider. They offer VPN services to hundreds of clients based in and out of Tokyo business district. There is a Main Frame system in the Data Center. In addition, the client is going to have Web based advisory systems for the agents and clients for which they would have an IDC with a Business Continuity site. It was decided that for seamless connectivity of the employees, agents and clients they need a solution, which would integrate everyone. We have proposed an MPLS Based VPN with IPSec tunnel access for Branches, Metro Ether connection for Tokyo CBD offices and IPSec based remote access VPN for agents and mobile employees.

The challenges to the solution lie in running IPSec VPN above the MPLS VPN client. There are multiple paths to two main sites. Client wants to reroute VPN traffic via another IPSec tunnel in case the primary link fails. The client wants a smooth failover so that it seems very transparent to the end users and there is no connection failure.

Initially, all the branches of the client were connected using 64K Frame Relay links. The client needed to upgrade the bandwidth from 64K. Wipro offered a MPLS VPN based solution, as it is a very cost-effective solution compared to leased or Frame circuit. All that the client needed to do was to take only the local circuit to the service provider and share the Service Provider's gigabit backbone. Using multi protocol BGP, the client routes are propagated to the other sites. In addition to this, multiple IPSec tunnels have been configured for having encrypted communication among sites.

The client Head Quarters, Branches, Internet Data Center and the business continuity sites are connected via the MPLS VPN. All the mobile users are connected using Cisco VPN concentrators. The Mobile users dial into the nearest ISP and connect via Internet to access the Intranet sites. The entire solution is based on Cisco products. Their Head Quarter is connected to other offices in Singapore, Hong Kong, UK etc via another VPN based solution from Checkpoint.