Configuring IPSec VPN
Full solution — hub-and-spoke with VPN for data and VoIP control
backup
The full solution consists of a hub-and-spoke with VPN for data and VoIP control backup.
In this topology:
There is a direct WAN connection to the Main Office for VoIP bearer and as primary VoIP
●
control connection.
The Broadband Internet connection uses cable or DSL modem, with a static public IP
●
address.
There is a VPN tunnel to the hub over the Internet for intranet data, and as backup
●
connection for VoIP control.
The local hosts access the Internet directly through the local broadband connection.
●
The PSTN connection backs up the voice bearer.
●
Figure 42: Full solution: hub-and-spoke with VPN for data and VoIP control backup
VoIP VLAN(s)
Branch Office
Data VLAN(s)
408 Administration for the Avaya G250 and Avaya G350 Media Gateways
WAN link (PPP or FR)
IPSec VPN link
Avaya GW
G350
PSTN
WAN
VoIP bearer +
primary control
DSL or
Data + VoIP
Cable
control backup
modem
Internet
Gateway
Main Office
Access
Router +
VPN
termination