Hi, everyone!
This post will introduce the common networking diagrams of DSVPN. Please have a look below for more information.
HUB-SPOKE VPN
In the Hub-Spoke scenario, the Spoke nodes establish VPN tunnels with the Hub node, but do not establish tunnels with each other. The traffic between Spoke nodes is relayed by the Hub node.
In this scenario, the tunnel interfaces of the Spoke nodes can be GRE P2P interfaces.
Figure 1. The networking diagram of Hub-Spoke VPN
SPOKE-SPOKE VPN
In the Spoke-Spoke scenario, the Spoke nodes establish VPN tunnels not only with the Hub node, but also dynamically with each other based on service requirements.
In this scenario, all tunnel interfaces must be GRE P2PM interfaces.
Figure 2. The networking diagram of Spoke-Spoke VPN
HUB REDUNDANCY
In the Hub redundancy scenario, each Spoke node establishes VPN tunnels with the two Hub nodes. Each Spoke node needs to confirm the active and standby Hub. If the active Hub is Down, the standby Hub takes over.
Figure 3. Networking diagram of Hub redundancy
HUB HOT BACKUP
In the Hub hot backup scenario, the active Hub backs up NHRP entries and IPSec tunnel information to the standby Hub. If the active Hub is Down, the standby Hub takes over.
Figure 4. Networking diagram of Hub hot backup
HUB LOAD BALANCING
In the Hub load balancing scenario, the two Hub nodes work together to process services. If one Hub is Down, the other takes over.
Figure 5. Networking diagram of Hub load balancing
This is what I wanted to share with you today on the networking diagrams of DSVPN. Thank you for reading this post!
