Create a Post
Showing results for 
Search instead for 
Did you mean: 

Branch migration from IPWAN to Internet

Dear All,

I need your advise/critiques for the procedure below.

Currently we have Branch connected to HO via IPWAN.

The plan is to move the branch to the Internet + VPN to HO.

Version: 80.10

Branch FW: 3100

HO has management server and central FW.


Assign External IP to the different branch FW interface.

Update topology on the Management server.

Create temp rules permitting communication between Management server and the branch *(with the new IP).

Create VPN community; Add HO and Branch FW there.

Apply policy to central and branch FW.

Change the static route for the branch FW to point to the new IP.

Change IP address for the branch object on Management server.

Re-attach the licenses.

Push policy to Branch firewall.

Create vpn tunnel interfaces on HO and Branch firewall.

Create static routes to internal subnets pointing to vpn interfaces.

Verify the traffic


Please let me know if I am missing anything here.


Kind regards,

Paul Z


0 Kudos
1 Reply

That all sounds ok, but why R80.10, which is a few years old and not something more recent?
0 Kudos


Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events