Stormshield SN series Configuration Manual page 420

Spoke B site
Following the method described in the paragraph
create the two tunnels needed:
Filter rules
In this tutorial, traffic between private networks is voluntarily not specified (destination port: ANY).
To optimize performance (save bandwidth and machine resources), it is important to refine the
filter on satellite sites (authorized protocols, ports, etc) in order to prevent unnecessary packets
from going through the tunnels. This filter policy will also be on the Hub site.
Spoke A site
Define the filter rules needed for exchanges between Spoke A and Spoke B, Spoke A and the Hub
as well as local traffic to the Internet:
Spoke B site
Define the filter rules needed for exchanges between Spoke B and Spoke A, Spoke B and the Hub
as well as local traffic to the Internet:
Page 420/448
SNS - USER CONFIGURATION MANUAL V.3
HOW TO: IPSEC VPN - HUB AND SPOKE CONFIGURATION
Configuring the Hub site / Creating
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
tunnels,