NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Hub and Spoke VPN


  • To: [email protected]
  • Subject: Re: [FW-1] Hub and Spoke VPN
  • From: Hal Dorsman <[email protected]>
  • Date: Thu, 31 Jan 2002 10:10:02 -0700
  • Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
  • Sender: Mailing list for discussion of Firewall-1 <[email protected]>
  • Thread-index: AcGqdSMvTD2mOb3DQRObObZn4Y8W4QAAr9lw
  • Thread-topic: Re: [FW-1] Hub and Spoke VPN

>
> > Is there a reason you don't want to fully mesh them?
>
> Yes, the configuration does not scale well. If you have 20
> sites setting up
> the VPNs fully meshed is much more complex and adding an
> additional site or
> removing one will be very time consuming. Using a hub and
> spoke model the
> configuration will be much quicker.

I agree, and I can't see any reason why you shouldn't be able
to.  Directing traffic from one remote site to another would
be a function of routing in your firewall.  Keep the networks
for your remotes unique and you shouldn't have a problem.

Hal


>
> -Jeff Pecchio
>
>
> ----- Original Message -----
> From: "Don" <[email protected]>
> To: <[email protected]>
> Sent: Thursday, January 31, 2002 9:45 AM
> Subject: Re: [FW-1] Hub and Spoke VPN
>
>
> > > Does anyone have experience with a hub and spoke
> architecture for VPN's
> > > using 4.1. I have numerous sites that all need
> connectivity to each
> > > other and do not want to fully mesh them.
> > This is going to double the traffic on the hub and it's Internet
> > connection.
> >
> > Is there a reason you don't want to fully mesh them?
> >
> > -Don
> >
> > =================================================
> > To set vacation, Out Of Office, or away messages,
> > send an email to [email protected]
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > [email protected]
> > =================================================
> >
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.