Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Ivory

Branch migration from IPWAN to Internet

Dear All,

I need your advise/critiques for the procedure below.

Currently we have Branch connected to HO via IPWAN.

The plan is to move the branch to the Internet + VPN to HO.

Version: 80.10

Branch FW: 3100

HO has management server and central FW.

Procedure: 

Assign External IP to the different branch FW interface.

Update topology on the Management server.

Create temp rules permitting communication between Management server and the branch *(with the new IP).

Create VPN community; Add HO and Branch FW there.

Apply policy to central and branch FW.

Change the static route for the branch FW to point to the new IP.

Change IP address for the branch object on Management server.

Re-attach the licenses.

Push policy to Branch firewall.

Create vpn tunnel interfaces on HO and Branch firewall.

Create static routes to internal subnets pointing to vpn interfaces.

Verify the traffic

 

Please let me know if I am missing anything here.

 

Kind regards,

Paul Z

 

0 Kudos
1 Reply
Highlighted
Admin
Admin

That all sounds ok, but why R80.10, which is a few years old and not something more recent?
0 Kudos