User's Manual

https://www.peplink.com 83 Copyright @ 2019 Pepwave
One of the WANs connected to Router A is non-NAT’d (212.1.1.1). The rest of the WANs
connected to Router A and all WANs connected to Router B are NAT’d. In this case, the Peer IP
Addresses / Host Names field for Router B should be filled with all of Router A’s hostnames or
public IP addresses (i.e., 212.1.1.1, 212.2.2.2, and 212.3.3.3), and the field in Router A can be
left blank. The two NAT routers on WAN1 and WAN3 connected to Router A should inbound
port-forward TCP port 32015 to Router A so that all WANs will be utilized in establishing the
VPN.
12.3 SpeedFusion
TM
Status
SpeedFusion
TM
status is shown in the Dashboard. The connection status of each connection
profile is shown as below.
After clicking the Status button at the top right corner of the SpeedFusion
TM
table, you will be
forwarded to Status>SpeedFusion
TM
, where you can view subnet and WAN connection
information for each VPN peer. Please refer to Section 22.6 for details.
IP Subnets Must Be Unique Among VPN Peers
The entire interconnected SpeedFusion
TM
network is a single non-NAT IP network. Avoid duplicating subnets in
your sites to prevent connectivity problems when accessing those subnets.
13 IPsec VPN
IPsec VPN functionality securely connects one or more branch offices to your company's main
headquarters or to other branches. Data, voice, and video communications between these
locations are kept safe and confidential across the public Internet.
IPsec VPN on Pepwave routers is specially designed for multi-WAN environments. For
instance, if a user sets up multiple IPsec profiles for a multi-WAN environment and WAN1 is
connected and healthy, IPsec traffic will go through this link. However, should unforeseen
problems (e.g., unplugged cables or ISP problems) cause WAN1 to go down, our IPsec
implementation will make use of WAN2 and WAN3 for failover.