#1  
Old October 27th, 2011, 09:24 AM
VaderRocks VaderRocks is offline
Junior Member
NETGEAR Newbie
 
Join Date: Aug 2008
Posts: 25
VaderRocks is on a distinguished road
Default Hub and Spoke to fully meshed VPN

Greetings, I have 4 locations using FVS338s in a hub and spoke VPN configuration. I want to change from hub and spoke to a fully connected VPN network topology. Is the FVS338 smart enough to perfom least cost routing? Will this work?

Thanks in advance.
Reply With Quote
  #2  
Old October 27th, 2011, 09:46 AM
adit's Avatar
adit adit is offline
Moderator
NETGEAR Fanatic
 
Join Date: Nov 2006
Location: USA
Posts: 5,034
adit is on a distinguished road
Default Re: Hub and Spoke to fully meshed VPN

There is no LCR in an IPSec VPN. There is one route between the two endpoints (no matter if it is full mesh or hub & spoke).

Since you have a single WAN router (FVS338) you can only use a single ISP connection. You cannot do LCR.

I think you might be using the wrong term (LCR).
__________________
.
Forum Rules - Post Screenshots on ImageShack for Free - Firmware Upgrade Procedure
.
Online Subnet Calculator - LAN Subnets NOT to Use - SA Lifetime Guidelines - Hex/IP Converter
.
Free Netgear Support Online Trouble Ticket Submissions 1-888-NETGEAR 4,3 Netgear Knowledge Base
.
VPN Router Support, Interface Demos,and Marketing Pages:
.
SRX5308 S M - FVS336G S I I M - FVS318G S M - FVS318N S M - FVS338 S I I M - SRXN3205 S M -
VPNG01/5L S M - FVS318 S I I M - DGFV338B S I M - FVG318 S I I M - SSL312 S I M - FVX538 S I I
.
FVS114 - FVS124G - FVS328 - FVL328 - FWG114P - GPL Firmware Code - MyOpenRouter - VPNC Docs
.
Click Here for my VPN Client and Mode Config VPN Client Tutorials
.
ProSecure STM/UTM Appliance User Forum - Prosecure Marketing Website
.
.
Good Luck...ADIT

FYI - I am a Reseller and not employed by Netgear
Reply With Quote
  #3  
Old October 28th, 2011, 05:28 AM
VaderRocks VaderRocks is offline
Junior Member
NETGEAR Newbie
 
Join Date: Aug 2008
Posts: 25
VaderRocks is on a distinguished road
Default Re: Hub and Spoke to fully meshed VPN

Adit, I plan on adding additional IPSEC tunnels to / from each router. A total of 6 for 4 nodes. My question focused on the ability of the FVS338 to route packets correctly. In mytesting last night, I found my configuration works as expected.

Thanks
Reply With Quote
  #4  
Old October 28th, 2011, 08:13 AM
adit's Avatar
adit adit is offline
Moderator
NETGEAR Fanatic
 
Join Date: Nov 2006
Location: USA
Posts: 5,034
adit is on a distinguished road
Default Re: Hub and Spoke to fully meshed VPN

You use the same IKE policy and add VPN policies to it. One for each subnet, IP range, or individual IP that you want available between the sites.

You should be fine.
__________________
.
Forum Rules - Post Screenshots on ImageShack for Free - Firmware Upgrade Procedure
.
Online Subnet Calculator - LAN Subnets NOT to Use - SA Lifetime Guidelines - Hex/IP Converter
.
Free Netgear Support Online Trouble Ticket Submissions 1-888-NETGEAR 4,3 Netgear Knowledge Base
.
VPN Router Support, Interface Demos,and Marketing Pages:
.
SRX5308 S M - FVS336G S I I M - FVS318G S M - FVS318N S M - FVS338 S I I M - SRXN3205 S M -
VPNG01/5L S M - FVS318 S I I M - DGFV338B S I M - FVG318 S I I M - SSL312 S I M - FVX538 S I I
.
FVS114 - FVS124G - FVS328 - FVL328 - FWG114P - GPL Firmware Code - MyOpenRouter - VPNC Docs
.
Click Here for my VPN Client and Mode Config VPN Client Tutorials
.
ProSecure STM/UTM Appliance User Forum - Prosecure Marketing Website
.
.
Good Luck...ADIT

FYI - I am a Reseller and not employed by Netgear
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -8. The time now is 10:55 AM.