If your company is deploying multi-site broadband VPNs you need to consider using a L2TP Private Wide Area Network. A PWAN employs Virtual Route Forwarding to offer complete security over a shared MPLS backbone.

 

The beauty of this approach is that you don’t need expensive MPLS connections – an ADSL line will do which can be a very cost effective way of providing security to remote sites.

 

Moreover there is a choice of PWAN with or without internet access. A company that needs only an inward facing network, for example for streaming music or messaging to stores completely removes the need for firewall support at each remote site.

 

For a slightly more sophisticated network with internet access and, say broadband VPN connectivity for mobile workers, only one centrally located firewall is needed (or two for resiliency).

 

This means that corporate resources such as billing platforms and CRM packages that would normally be located at the corporate HQ can now be located at a centrally positioned data-centre. This is then accessible to every site on the corporate network without the need to provide an expensive beefed up IP connection to the HQ and removes this as a single point of failure.

 

Typically not every ISP offers this kind of PWAN. It relies on BT Central pipes that support L2TP which the smaller pipes do not do. Larger consumer oriented ISPs that may well have the technology are potentially not interested in supporting what is essentially an unique circuit design for every customer.