This example describes how to configure the settings in Policy Manager. Configure the BOVPN Gatewaysįirst, we configure the BOVPN gateways of Remote Office A, the Central Office, and Remote Office B. In this example, we do not use a zero route (0.0.0.0/0) in the BOVPN configuration. This preserves the split tunnel of each location. In the BOVPN configuration, we define the subnet of each trusted network at the respective locations rather than create a default route tunnel between the central office and the remote offices. This scenario is useful when you require control of network security at the Central Office, because you can apply policies to traffic between Sites A and B at the Central Office.Įxternal interface IP address: 198.51.100.2/24 In this example, we demonstrate how to pass traffic from the trusted network of Remote Office A to the trusted network of Remote Office B without creating a third BOVPN tunnel between the two remote offices. For detailed information about the BOVPN configuration settings used in this example, see About Manual IPSec Branch Office VPNs. This topic provides an example of how to configure BOVPN tunnel switching.

When you set up this feature, the Firebox decrypts packets sent from one VPN and sends the re-encrypted packets to their destination on the other VPN. When you connect two or more remote BOVPN tunnels to your network, you must configure tunnel switching if you want the computers on each remote network to exchange data. Configure Manual Branch Office VPN Tunnel Switching

Set up branch office vpn watchguard