peqwilber

I would go on DMVPN. As you cannot run routing protocol with PE, then the tunnel would bypass. Point-to-point GRE would not be scalable for 250k. It supports IPV6 [Hidden Content] Design guide also says it support load balancing [Hidden Content] THe low operational cost would be managing more the Hub side, as the configs on the spokes would be standard.

[Hidden Content] Link for the VACL question

B. VACL VLAN Access-List (VACL) VLAN access-lists (VACL) are very useful if you want to filter traffic within the VLAN.

Iaas in a public cloud would more efficient, but it is not an option. So, On premises x private cloud was the tie breaker as it is more scalable than the on premises IaaS.

C and D

Any way of getting this on Mega so US users can access it?

Please share the vce and we will find a way to convet it...