Service Demands In a scenario of IPsec VPN with NAT traversal, static NAT (SNAT) needs to be deployed for Spoke A to initiate a connection with the hub site, and dynamic NAT (DNAT) needs to be deployed for the hub site. Figure shows the typical networking diagram. Restrictions and Guidelines
You have completed basic network configurations, including interface IP address and routing information on routers and servers. Using a Configuration Wizard
(a) Choose Network> IPsec VPN > Config Wizard. The basic configuration page of the configuration wizard is displayed. (b) Set Scenario to Point-to-Multipoint, and set the other parameters according to the following figure. (c) After completing the configuration, click Next. (2) Configure authentication. (a) Configure parameters according to the following figure. (b) After completing the configuration, click Next. (3) Configure interesting traffic. (a) Click Create. Configure parameters for interesting traffic according to the following figure. (b) After completing the configuration, click Next. (4) Verify Configuration. (a) After verifying the configuration, click Finish. Configuring Spoke A (1) Perform basic configuration (a) Choose Network> IPsec VPN > Config Wizard. The basic configuration page of the configuration wizard is displayed. (b) Set Scenario to Point-to-Point, and set the other parameters according to the following figure. (c) After completing the configuration, click Next. (2) Configure authentication. (a) Configure parameters according to the following figure. (b) After completing the configuration, click Next. (3) Configure interesting traffic. (a) Click Create. Configure parameters for interesting traffic according to the following figure. (b) After completing the configuration, click Next. (4) Verify configuration. (a) After verifying the configuration, click Finish. |
This site contains user submitted content, comments and opinions and is for informational purposes only. Ruijie may provide or recommend responses as a possible solution based on the information provided; every potential issue may involve several factors not detailed in the conversations captured in an electronic forum and Ruijie can therefore provide no guarantee as to the efficacy of any proposed solutions on the community forums. Ruijie disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Ruijie Community Terms of Use.
More ways to get help: Visit Support Videos, call us via Service Hotline, Facebook or Live Chat.
©2000-2023 Ruijie Networks Co,Ltd