VPN domain question

[Teddy_Brewski]

Hello,

R77 cluster with the VPN domain set to "All IP Addresses behind Cluster Members are based on Topology information". One of the interfaces has a bunch of other subnets defined under Topology > Internal (leads to the local network) > IP Addresses behind this interface > Specific.

Will those subnets be considered as part of the encryption domain as well?

Thank you.

[Vladimir · Accepted solution]

Yes.

Generally, I prefer defining Encryption Domains manually for both, site to site and remote access to narrow-down the scope of advertised networks.

[Teddy_Brewski]

Thank you!