Dmvpn - Apollo VioNet 3000 series User Manual And Instruction Manual

If the required CA does not coincide with that sent, search in the CERTIFICATES menu to ensure
there does exist a loaded certificate pertaining to this CA.
Router CERTIFICATES config>LIST LOADED PRINTISSUER <certificate_name>
NOTE: When using certificates, you must configure the date and time in the device correctly
10.2

DMVPN.

10.2.1 Introduction
The purpose of the DMVPNs is to allow interconnection between various branches of a company, not just
with the central headquarters but also between them without traffic having to first pass through the central
office. The main advantage of the DMVPNs is that this is carried out through encrypted tunnels via public
network access, such as the Internet, without needing to contract leased point-to-point lines which are far
less economical. Internet access is relatively cheap and in many cases is already present in the company's
offices.
The IPSec protocol permits encrypted point-to-point connections guaranteeing the integrity and privacy of
data in public networks. The most feasible way to organize a large network based in IPSec and Internet is
to use a partially or fully meshed network or a hub and spoke scheme. Hub-and-spoke is usually selected
as, in the majority of cases, the largest part of the traffic goes between the spoke and the hub while the rest
tends to be sporadic traffic between spokes. One drawback to a completely meshed network is that it
demands greater power from the spokes so these can connect to the rest of the spokes which, in a large
network, can be high in number. Internet is used to connect the hub to the spokes in a DMVPN;
consequently the spokes are able to interconnect as the Internet is a meshed network.
SPOKE1
Given that connection between spokes is possible, it's better that traffic between spokes is directly
transmitted without going through the hub. This saves hub resources and the round trip paths for the
information are more optimal than for those routes passing through the hub. You may not know the
so you won't have problems regarding certificate validity.
Router
Private Net
Apollo Video Technology
th
Avenue Southeast – Bothell, WA 98021-8990
24000-35
Toll Free: 888-AVT-USA1; Tel: 425.483.7100; Fax: 425.483.7200
www.apollovideo.com
VioNet 3000 Series Mobile Router | User Guide
Prvate Net
HUB
Router
Internet
Router
SPOKE2
Private Net
SPOKE3
Router
Private Net
Page 169