For a control centre to manage the secure Intranet among all of its remote sites, there is a simple configuration, called Hub
and Spoke for the whole VPN network. A Hub and Spoke VPN Network is set up in organizations with centralized control
centres over all its remote sites. The control centre acts as the Hub and the remote sites act as Spokes. All VPN tunnels from
remote sites terminate at this Hub which acts as a concentrator. Site-to-site connections between spokes do not exist. Traffic
originating from one spoke and destined for another spoke must go via the Hub. Under this configuration, you don’t need to
maintain VPN tunnels between each two remote clients.
6.1.1.4 Dynamic VPN Server Scenario
Figure 235 – Dynamic VPN Server Scenario
Dynamic VPN Server Scenario is an efficient way to build multiple tunnels with remote sites, especially for mobile clients with
dynamic IP addresses. In this scenario, the router can only take the role of a server (responder), and it must have a “Static IP”
or “FQDN”. It can allow many VPN clients (initiators) to connect to various tunnel scenarios. In short, with a simple Dynamic
VPN server setting, many VPN clients can connect to the server. In comparison to the Hub and Spoke mechanism direct
communication between any two clients via the Dynamic VPN server is not allowed. You can configure one Dynamic VPN
server for each WAN interface of the NTC-400 Series Router.
To create and configure IPSec tunnels, go to the Security menu, select VPN from the submenu and click its IPSec tab.
Figure 236 – Enable IPSec
To Next Page
Loading...
Need help?
General