I'm looking to add security on a LAN to LAN link that we have in my network. This LAN to LAN link is used to extend vlans over 2 sites (local & remote).
For now, the diagram is this one :
I have to add the security features with 2 Cisco 891 routers (this is not a choice but a constraint).
I am looking to change the network architecture following this diagram :
In fact, the idea here is to add a 891 router between my L3 switch and the ISP's equipment, and to do this on both sites of course.
Then, I will have to create L3 connectivity between my 2 routers using the lan to lan link. This way I can encrypt the packets using IPSEC.
But to be as transparent as possible for the network, I will have to encapsulate the L2 datagrams coming from my network into L2TP packets, which will then be encrypted via IPSEC and sent over the LAN to LAN link to the remote router.
Am I correct in these assumptions ? Is this something that is technically possible ?
I don't really know how I can interconnect my 891 router with the ISP's equipment, for starters.
Thanks for the help Jeremy