ZyXEL Communications Vantage CNM 2.3 User Manual page 344

Chapter 11 IPSec VPN
routes in each spoke router, depending on the IP addresses and subnets of each
spoke.
However a VPN concentrator is not for every situation. The hub router is a single
failure point, so a VPN concentrator is not as appropriate if the connection
between spoke routers cannot be down occasionally (maintenance, for example).
There is also more burden on the hub router. It receives VPN traffic from one
spoke, decrypts it, inspects it to find out to which spoke to route it, encrypts it,
and sends it to the appropriate spoke. Therefore, a VPN concentrator is more
suitable when there is a minimum amount of traffic between spoke routers.
The VPN Concentrator summary screen displays the VPN concentrators in the
Vantage CNM. To access this screen, click Device Operation > Device
Configuration > VPN > IPSec VPN > Concentrator. The following screen
appears.
Figure 150 Device Operation > Device Configuration > VPN > IPSec VPN >
Concentrator
Each field is discussed in the following table. See
more information.
Table 134 Device Operation > Device Configuration > VPN > IPSec VPN >
Concentrator
LABEL
Page Size
#
Name
Add icon
344
DESCRIPTION
Select how many entries you want to display on each page.
This field displays the name of the VPN concentrator.
This column provides icons to add, edit, and remove VPN
concentrators.
To add a VPN concentrator, click the Add icon at the top of the column.
The VPN Concentrator Add/Edit screen appears.
To edit a VPN concentrator, click the Edit icon next to the concentrator.
The VPN Concentrator Add/Edit screen appears accordingly.
To delete a VPN concentrator, click on the Remove icon next to the
concentrator. The Web Configurator confirms that you want to delete
the VPN concentrator.
Section 11.3.1 on page 345
Vantage CNM User's Guide
for