Configuring The Central Hub Site - Stormshield SN series Configuration Manual

Configuring the central Hub site

Defining IPSec peers
Following the method described in the paragraph
peers in Case no. 1, create both peers Site_Spoke_A and Site_Spoke_B.
To define Site_Spoke_A, use the following values:
remote gateway: IPS-Firewall of the Spoke A site (object Pub_FW_Spoke_A),
l
Certificate: the certificate of the Hub IPS-Firewall.
l
To define Site_Spoke_B:
remote gateway: IPS-Firewall of the Spoke B site (object Pub_FW_Spoke_B),
l
Certificate: the certificate of the Hub IPS-Firewall.
l
Creating tunnels
Follow the method described in the paragraph
Case no. 1 to define the following VPN tunnels:
Filter rules
Define the filter rules needed for exchanges between Spoke sites, Spoke sites and the Hub as
well as local traffic to the Internet:
Page 422/448
SNS - USER CONFIGURATION MANUAL V.3
HOW TO: IPSEC VPN - HUB AND SPOKE CONFIGURATION
Configuring the Hub site / Defining IPSec
Configuring the Hub site / Creating tunnels
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
in