Administration of the Avaya G350 Media Gateway - Avaya Support

Configuring IPSec VPNFull or partial meshThis installation is very similar to the simple hub and spokes installation, but instead ofconnecting to a single central site, the branch is also connected to several other branch sites bydirect IPSec VPN tunnels. The configuration is therefore very similar to the previous one,duplicated several times.In this topology:●●●●The Broadband Internet connection uses cable or DSL modem, with a static public IPaddress.There is a VPN tunnel from each Spoke to the VPN hub over the Internet.There is a VPN tunnel from one Spoke to another Spoke.Only VPN Traffic is allowed via the internet connection.Figure 19: Full or partial meshHub-to-spoke IPSec VPN linkBranch-to-branch IPSec VPN linkInternetAccessRouter +VPNterminationMain OfficeBranchOffice 1Avaya GwG350DSL orCablemodemAvaya GwG350DSL orCablemodemDSL orCablemodemAvaya GwG350BranchOffice NBranchOffice 2226 Administration of the Avaya G350 Media Gateway