Determining network scenarios, Installing and deploying imc components – H3C Technologies H3C Intelligent Management Center User Manual
Page 25
15
Determining network scenarios
For security and confidentiality purposes, enterprises and organizations build VPNs over IPsec to secure
Layer 3 communication among the headquarters and branches, as shown in
Figure 19 VPN for headquarters and branch networks
A typical VPN includes a hub and multiple spokes.
•
Hub—Egress device on the headquarters network.
•
Spoke—Egress device on a branch network.
IVM supports the following VPN network scenarios, according to the manageability of the spokes:
•
Static network—The hub and all spokes use static IP addresses and are managed by the IMC
Platform.
•
Branch network—The hub uses a static IP address. All spokes obtain IP addresses dynamically, or
they are located behind a NAT device or a firewall. The spokes are managed by IMC BIMS, but
cannot be managed by the IMC Platform.
•
Hybrid network—The hub and some spokes use static IP addresses. Other spokes obtain IP
addresses dynamically, or they are located behind a NAT device or firewall.
Installing and deploying IMC components
As shown in
, the NMS is deployed on the headquarters network. To use IMC as the NMS,
deploy IMC components according to the VPN network scenario.