Skip to content

NetworkPuzzles

    • About
  • IPv6 (1)
  • MPLS (1)
  • Network Automation (19)
  • Network Services (8)
  • Quality of Service (2)
  • SDN (10)

recent posts

  • L3VPN is not just about labels, MP-BGP, or VRFs
  • IPv6 Prefix Delegation and SLAAC
  • WFQ, CBWFQ and LLQ Explained in a Practical Way
  • How Traffic is Classified, Marked, and Queued
  • NAT
  • Proxy ARP
  • DNS and HTTP GET with IP SLA
  • Cisco IRB (Integrated Routing and Bridging)
  • GLBP Weighting
  • DNS Server on Cisco IOS
  • DHCP Proxy over PPP
  • ARP authorized
  • QoS in Cisco SD-WAN
  • Application-based traffic steering And AAR
  • Creating Extranets and Access to Shared Services
  • Enforcing Security Perimeters with Service Insertion
  • Cisco SD-WAN TLOC Extension
  • Cisco SD-WAN Security Features
  • Traffic Engineering at Sites with Multiple Routers
  • Isolating Guest Users from the Corporate VPN
  • Cisco SD-WAN Hub-and-Spoke Topology
  • Cisco SD-WAN Onboarding
  • AI-Powered Network Assistant
  • Ansible Playbook
  • Ansible Gathering Facts
  • AI-Powered Interface Health Checker with pyATS and OpenAI
  • pyATS
  • Nornir
  • Scrapli
  • Netmiko

    Category: MPLS

    • L3VPN is not just about labels, MP-BGP, or VRFs

      May 11, 2026

      The real complexity begins when you design a scalable VPN architecture for hundreds or thousands of customer sites. At small scale, almost any design works. At large scale, every design decision affects: For example: • Internet Access Design Should Internet access be centralized through a shared hub/firewall VRF? Or should every site use local Internet…

    Blog at WordPress.com.