R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

396
Figure 295 Full mesh DVPN networking diagram
• Hub-spoke DVPN. In a hub-spoke DVPN, no tunnel can be established between two spokes, and
data between them has to be forwarded through the hub. The hub is used as both the routing
information exchange center and the data forwarding center. As shown in Figure 296, eac
h spoke
establishes a permanent tunnel with the hub, and data between spokes is forwarded through the
hub.
Figure 296 Hub-spoke DVPN networking diagram
Implementation of DVPN
DVPN works in three phases: connection initialization, registration, and tunnel establishment. The
following is a brief description of the phases:
Site 1 Site 2
VAM server
Hub
Spoke 1
Public network
Spoke 2
Spoke-Spoke
Hub-Spoke
Data
Site 1 Site 2
VAM server
Hub
Spoke 1
Public network
Spoke 2
Hub-Spoke