Scenario 3 - Ipsec: Multiple Datacenter Deployment With Primary And Backup Controllers For Redundancy - Siemens SCALANCE W1750D UI Configuration Manual

35.3 Scenario 3 - IPsec: Multiple Datacenter Deployment with Primary and Backup Controllers for Redundancy

35.3 Scenario 3 - IPsec: Multiple Datacenter Deployment with Primary
and Backup Controllers for Redundancy
This scenario includes the following configuration elements:
● Multiple controller deployment model with controllers in different data centers operating
as primary/backup VPN with Fast Failover and preemption enabled.
● Split-tunneling of traffic.
● Split-tunneling of client DNS traffic.
● Two Distributed, L3 mode DHCPs, one each for employee and contractors; and one
Local mode DHCP server.
● RADIUS server within corporate network and authentication survivability enabled for
branch survivability.
● Wired and wireless users in L3 and NAT modes, respectively.
● Access rules for wired and wireless users with source-NAT-based rule for contractor roles
to bypass global routing profile.
● OSPF based route propagation on controller.
SCALANCE W1750D UI
Configuration Manual, 02/2018, C79000-G8976-C451-02
AP-VPN Deployment Scenarios
541