Automation

Hello everyone,

We are an ISP providing internet services to customers using multivendor CPEs (Fortirouter, Juniper, Cisco) installed onsite. These CPEs connect over a fiber-optic last-mile to the nearest Provider Edge (PE), where the gateway is configured.

Occasionally, customers report issues such as high latency or not achieving their subscribed bandwidth. To address these concerns, we certify the last-mile connection using iPerf3 for traffic and bandwidth analysis.

Current Process:
To perform this certification, we dispatch a technician to the customer site. The technician connects a PC running iPerf3 as a client and establishes a connection to our iPerf3 server. We temporarily add the customer's public IP to our firewall to enable communication between the client and server.

Challenge:
We are looking to eliminate the need for dispatching technicians onsite. Ideally, we want to conduct the iPerf3 certification remotely, streamlining the process and reducing operational costs.

Proposed Idea:
One potential solution is setting up one or more GRE tunnels between our infrastructure and the customer CPE. With proper routing, this could enable direct communication between the iPerf3 client (on the CPE or customer-side network) and our iPerf3 server, without requiring a physical technician presence.

Attached is a topology diagram illustrating the proposed setup.

Request for Feedback:

• Has anyone implemented a similar setup or overcome a similar challenge?
• Are GRE tunnels the best solution in this scenario, or would another tunneling or routing protocol be more effective?
• Any potential pitfalls or security concerns we should consider?

We appreciate any insights or suggestions to refine this approach.

Thank you in advance for your time and expertise!

Best regards,

Hi,

As i remember GRE tunnel has some limitation. I suggest u do Paragon Assurance so u can avoid send technician onsite.

Thanks

Hello everyone,

We are an ISP providing internet services to customers using multivendor CPEs (Fortirouter, Juniper, Cisco) installed onsite. These CPEs connect over a fiber-optic last-mile to the nearest Provider Edge (PE), where the gateway is configured.

Occasionally, customers report issues such as high latency or not achieving their subscribed bandwidth. To address these concerns, we certify the last-mile connection using iPerf3 for traffic and bandwidth analysis.

Current Process:
To perform this certification, we dispatch a technician to the customer site. The technician connects a PC running iPerf3 as a client and establishes a connection to our iPerf3 server. We temporarily add the customer's public IP to our firewall to enable communication between the client and server.

Challenge:
We are looking to eliminate the need for dispatching technicians onsite. Ideally, we want to conduct the iPerf3 certification remotely, streamlining the process and reducing operational costs.

Proposed Idea:
One potential solution is setting up one or more GRE tunnels between our infrastructure and the customer CPE. With proper routing, this could enable direct communication between the iPerf3 client (on the CPE or customer-side network) and our iPerf3 server, without requiring a physical technician presence.

Attached is a topology diagram illustrating the proposed setup.

Request for Feedback:

• Has anyone implemented a similar setup or overcome a similar challenge?
• Are GRE tunnels the best solution in this scenario, or would another tunneling or routing protocol be more effective?
• Any potential pitfalls or security concerns we should consider?

We appreciate any insights or suggestions to refine this approach.

Thank you in advance for your time and expertise!

Best regards,

Hi, that only works for Juniper devices?, we are using multivendor devices (cisco, juniper, fortirouter, etc)

Hi,

As i remember GRE tunnel has some limitation. I suggest u do Paragon Assurance so u can avoid send technician onsite.

Thanks

Hello everyone,

We are an ISP providing internet services to customers using multivendor CPEs (Fortirouter, Juniper, Cisco) installed onsite. These CPEs connect over a fiber-optic last-mile to the nearest Provider Edge (PE), where the gateway is configured.

Occasionally, customers report issues such as high latency or not achieving their subscribed bandwidth. To address these concerns, we certify the last-mile connection using iPerf3 for traffic and bandwidth analysis.

Current Process:
To perform this certification, we dispatch a technician to the customer site. The technician connects a PC running iPerf3 as a client and establishes a connection to our iPerf3 server. We temporarily add the customer's public IP to our firewall to enable communication between the client and server.

Challenge:
We are looking to eliminate the need for dispatching technicians onsite. Ideally, we want to conduct the iPerf3 certification remotely, streamlining the process and reducing operational costs.

Proposed Idea:
One potential solution is setting up one or more GRE tunnels between our infrastructure and the customer CPE. With proper routing, this could enable direct communication between the iPerf3 client (on the CPE or customer-side network) and our iPerf3 server, without requiring a physical technician presence.

Attached is a topology diagram illustrating the proposed setup.

Request for Feedback:

• Has anyone implemented a similar setup or overcome a similar challenge?
• Are GRE tunnels the best solution in this scenario, or would another tunneling or routing protocol be more effective?
• Any potential pitfalls or security concerns we should consider?

We appreciate any insights or suggestions to refine this approach.

Thank you in advance for your time and expertise!

Best regards,