In the context of VPN, a site-to-site connection refers to a connection between two different physical locations or networks. This type of connection is commonly used to allow communication between different offices or branches of a company.
Site-to-site VPNs typically involve the use of multiple routers or networks, which can be configured to allow traffic to pass between them. This can be done through a variety of methods, including the use of routing protocols such as OSPF or BGP, or through the use of static routes.
One of the key advantages of site-to-site VPNs is their ability to enable communication between multiple networks, even if those networks are using different IP address ranges or subnets. This can be especially useful for companies with multiple offices or remote workers, as it allows them to easily access shared resources and collaborate with colleagues in other locations.
Another benefit of site-to-site VPNs is their ability to provide a high level of security for network traffic, by encrypting all data transmitted over the VPN connection. This can help to protect sensitive information from interception or unauthorized access.
Overall, site-to-site VPNs are an important tool for businesses that need to connect multiple physical locations or networks, and can help to improve productivity, collaboration, and security across the organization.
¶ Configuration
Our cloud platform offers a convenient and secure way to configure site-to-site VPN connections. With just a few clicks, you can easily connect different physical locations or networks using our intuitive interface.
First, you'll need to create a new VPN connection in our platform and select the site-to-site option. From there, you can enter the necessary information, such as the IP addresses of the networks you want to connect, and choose the appropriate encryption settings.
Once you've configured the connection, our platform will automatically generate the necessary VPN configuration files and send them to your devices or routers. You can then simply import these files into your devices or routers to establish the VPN connection.
One of the key benefits of using our cloud platform for site-to-site VPN configuration is the ability to easily manage and monitor your connections from a centralized location. You can view real-time connection status, bandwidth usage, and other important metrics, and make changes to your configuration as needed.
In addition, our platform offers robust security features to ensure that your VPN connections are fully protected. We use advanced encryption protocols and security measures to prevent unauthorized access and ensure the confidentiality of your data.
Overall, our cloud platform provides a powerful and easy-to-use solution for configuring site-to-site VPN connections, allowing you to connect your networks securely and efficiently.
¶ Create a Site-to-Site
Go to "site-to-site" configuration page
Click on "create site"
Then a window will show up. Define a name for your site.
¶ Broadcast
This option selects the way broadcast packets are sent to other daemons. NOTE: all nodes in a VPN must use the same Broadcast mode, otherwise routing loops can form.
If no, broadcast packets are never sent to other nodes.
¶ Mode
¶ Router
In this mode Subnet variables in the host configuration files will be used to form a routing table. Only unicast packets of routable protocols (IPv4 and IPv6) are supported in this mode.
Brodcast / multicast data will not be forwarded. Layer 3
¶ Switch
In this mode the MAC addresses of the packets on the VPN will be used to dynamically create a routing table just like an Ethernet switch does. Unicast, multicast and broadcast packets of every protocol that runs over Ethernet are supported in this mode at the cost of frequent broadcast ARP requests and routing table updates.
This mode is primarily useful if you want to bridge Ethernet segments. By selecting switch mode, Subnet parameter will be ignored.
Brodcast / multicast data will be forwarded. Layer 2
¶ Interface
Select nodes you want in your site.
After confirmation, nodes will be automaticaly updated. You can see the state of the bridge on a device.