SRX Services Gateway
SRX Services Gateway

hub and spoke VPN

06.07.17   |  
‎06-07-2017 03:47 AM

1-can HUB & spoke VPN be done using policy-based VPN ??

 

2-is it possible to connect 2 SRX devices one using policy-based and the other one using route-based ??? if yes how ?

3 REPLIES
SRX Services Gateway

Re: hub and spoke VPN

06.07.17   |  
‎06-07-2017 04:33 AM
1-can HUB & spoke VPN be done using policy-based VPN ??
NO

2-is it possible to connect 2 SRX devices one using policy-based and the other one using route-based ??? if yes how ?
Do you have 2 links between them or 1? May be a topology diagram can help to understand this questions in a better way
Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
SRX Services Gateway

Re: hub and spoke VPN

06.07.17   |  
‎06-07-2017 04:39 AM

i don't have a specific digram in my mind, it was a question i was asked in an interview it was just " is it possible to connect between 2 devices one using policy-based and one using route-based"

Highlighted
SRX Services Gateway

Re: hub and spoke VPN

06.07.17   |  
‎06-07-2017 08:24 AM

1- NO

2- Yes, you just need to configure proxy-identity on the Route-based side to match the VPN security policy on the policy-based side.

 

Abdellah HAMDAD
Senior Network Consultant
JNCIE-SP/ENT/SEC
JNCIP-DC
JNCSP-SP/ENT/SEC
JNCDS-WAN/DC/SEC