topic Re: Site-to-Site IPSec VPN Full Tunnel Connectivity in Firewall and Security Management

Site-to-Site IPSec VPN Full Tunnel Connectivity

Pre_yo — Wed, 31 Jul 2024 09:14:03 GMT

Hello Checkmates,

Has anyone have experiences with S2S IPSec VPN Full Tunnel, this is my network using Star VPN Topology :

All Branch Offices use certificates to build IPSec S2S since there are using Broadband ISP and don't have Static Public IP

Branch A (Local Managed SPARK 1600) <-- IPSec --> HQ (Quantum 16200) <-- IPSec --> BRANCH B (Local Managed SPARK 1590)

Now we able to access the assets (Web Server, Host) inside HQ Network from All Branch Offices, but our goal is redirect internet access from all Branch Office to HQ.

So, when all Users access internet in Branch Office, the traffic route to HQ and use HQ ISP to access the internet, then we can monitor traffic from all branches in my Smart-1 in HQ.

Re: Site-to-Site IPSec VPN Full Tunnel Connectivity

PhoneBoy — Wed, 31 Jul 2024 22:36:54 GMT

Have you set it up already or are you just looking for experiences from doing so?

Re: Site-to-Site IPSec VPN Full Tunnel Connectivity

Pre_yo — Thu, 01 Aug 2024 03:55:29 GMT

Hi PhoneBoy,

We already setup the environment right now and able to access the assets in HQ from all Branches, now we have plan to route all traffic from Branch to HQ including Internet as i said before, but i can't found any SK related to this scenario.

Re: Site-to-Site IPSec VPN Full Tunnel Connectivity

PhoneBoy — Thu, 01 Aug 2024 13:14:06 GMT

This is defined in the VPN Community, which should be a Star type.

Select the (newly) created Star Community and click Edit.
Go to the Advanced Settings tab.
Under VPN Routing, select To center and through the center to other satellites, to internet and other VPN targets.