Skip to main content

Hub&Spoke VPN configuration

  • If Hub&Spoke VPN is not displayed in the EC Dashboard, this service option must be ordered in Order Management below the Company module in advance. How to get into the ordering process: Order Management
  • Hub&Spoke VPN is only available for the EC-M/L/XL version.
  • At least one location must be configured as Hub in the VPN and a maximum of four locations can be designated as a Hub.
  • A Hub&Spoke VPN cannot be connected to a LAN-I VPN.
  • Central Internet via firewall is not available in a Hub&Spoke VPN.

Configure Hub&Spoke VPN​

  1. Under VPN > Hub&Spoke VPN > enter a name for the H&S VPN.
  2. Then under locations select the location where you want to configure the H&S VPN.
  3. Select Connected VPNs at the selected location and click Connect VPN.
  4. Select the name of the previously defined H&S VPN in the selection window.
  5. Then, under Topology, select whether the location should act as a Hub or Spoke.
  6. If you want the location to be Spoke, then click Spoke.
  7. If the location is to be a Hub, then click Hub.
    • If the Spoke locations in the H&S VPN should be able to communicate with each other, you have to ensure the IP routing, so that the Spoke routers receive the appropriate routing information.
    • Typically, this can be done by propagating an IP summary route or default route.
    • These are either configured as a static route on the Hub CPE or received there via a dynamic routing protocol.
info

Secure Gate option: With this option, Spoke traffic can always first be routed to a customer router or firewall (Secure Gate) at the hub location to manage spoke-to-spoke traffic. To do this, enter the IP address of this router/firewall under Primary. Under Backup, you can enter another IP address, which would then be used if the primary fails. In case of EC-L or XL it is recommended to configure Secure Gate in combination with LAG port LAN side on the AR6280 or AR8140 CPE.

  1. Configure the selected location as described under VLANs and LAN-IP addressing.
  2. Perform steps 2 through 9 at each location where a Hub or Spoke location is located.
  3. Activate the created configuration by sending the shopping cart.