PLANET MH-1000 - Manual (Page 22)

Multi-Homing Security Gateway User’s Manual
Configuring MH-1000 for Fail Over provides added reliability to your VPN.
2.6.3 Concentrator
The VPN Concentrator provides an easy way for branch offices to connect to headquarter through a VPN
tunnel. All branch office traffic will be redirected to the VPN tunnel to headquarter with the exception of
LAN-side traffic. This way, all branch offices can connect to each other through headquarter via the
headquarter’s firewall management. You can also configure MH-1000 to function as a VPN Concentrator:
Please refer to appendix D for example settings.
100.100.100.1
200.200.200.1
192.168.2.x
192.168.3.x
201.201.201.1
192.168.4.x
Local subnet: 0.0.0.0
Local mask: 0.0.0.0
Remote subnet: 192.168.3.0
Remote mask: 255.255.255.0
Local subnet: 192.168.3.0
Local mask: 255.255.255.0
Remote subnet: 0.0.0.0
Remote mask: 0.0.0.0
Local subnet: 0.0.0.0
Local mask: 0.0.0.0
Remote subnet: 192.168.4.0
Remote mask: 255.255.255.0
Local subnet: 192.168.4.0
Local mask: 255.255.255.0
MH-1000
MH-1000
MH-1000
planet.dyndns.org
Before Fail Over
192.168.2.x
100.100.100.1
192.168.3.x
MH-1000
MH-1000
MH-1000
200.200.200.1
192.168.4.x
MH-1000
100.100.100.1 192.168.3.x
MH-1000
200.200.200.1
192.168.4.x
MH-1000
planet.dyndns.org
192.168.2.x
Remote subnet: 0.0.0.0
Remote mask: 0.0.0.0
- 18 -