Branch migration from IPWAN to Internet

Paul_Z — Fri, 20 Mar 2020 04:51:39 GMT

Dear All,

I need your advise/critiques for the procedure below.

Currently we have Branch connected to HO via IPWAN.

The plan is to move the branch to the Internet + VPN to HO.

Version: 80.10

Branch FW: 3100

HO has management server and central FW.

Procedure:

Assign External IP to the different branch FW interface.

Update topology on the Management server.

Create temp rules permitting communication between Management server and the branch *(with the new IP).

Create VPN community; Add HO and Branch FW there.

Apply policy to central and branch FW.

Change the static route for the branch FW to point to the new IP.

Change IP address for the branch object on Management server.

Re-attach the licenses.

Push policy to Branch firewall.

Create vpn tunnel interfaces on HO and Branch firewall.

Create static routes to internal subnets pointing to vpn interfaces.

Verify the traffic

Please let me know if I am missing anything here.

Kind regards,

Paul Z

Re: Branch migration from IPWAN to Internet

PhoneBoy — Sun, 22 Mar 2020 05:43:17 GMT

That all sounds ok, but why R80.10, which is a few years old and not something more recent?