Is this a common/proven VPN Routing setup using vpn_route.conf?

Rick_Ther — Mon, 29 Oct 2018 16:49:37 GMT

Hi all,

I searched for the right place asking this, nothing was 100% suitable, hope this place is not too wrong.

My question is basically about vpn routing. I uploaded a topology picture of the current setup and the target setup.
I think I put all the necessary information inside, nonetheless, below few words about it 🙂

The final target is like:

Communication between Site-Z and Site-D, E & F should be unencrypted but still inspected by the firewalls using dedicated private line
Site-D is acting as hub for Site-E & F to reach Site-Z
Site-D itself is communicating as well to Size-Z using the private line
Private line is transparent to the SGWs. They just need to sent the traffic to the corresponding site RTR.

Current plannning:

Remove Site-D, E & F from Star VPN Community
Using vpn_route.conf to promote FW_SiteD as Hub GW for Site-E & F
Set some static routes on FW_SiteD to route traffic from Site-D, E & F through private line to Site-Z
Set some static routes on FW_SiteZ to route traffic from Site-Z through private line to Site-D, E & F

I tested this already in a lab and it´s working fine so far.
My question to you, is this a common / proven way to achieve the target scenario? Or did i missed something / are there better ways to do?
I´m wondering if there is another way which is more, let´s say, "visible"?

I appreciate any kind of feedback, especially on any real world experience on this kind of setup.

Regards

Rick

topic Is this a common/proven VPN Routing setup using vpn_route.conf? in General Topics

Is this a common/proven VPN Routing setup using vpn_route.conf?