Solved
Site to Site VPN on multiple sites
Is the above scenario possible?
Site A === site to site vpn === Site B
Site B === site to site vpn === Site C
Site C === site to site vpn === Site A
It is like a network triangle but will it work?
spoojaryAnswer
Staff
August 24, 2023
Yes, the scenario you described is possible and commonly referred to as a "mesh" or "triangular" network topology. Each site has a site-to-site VPN connection with the other two sites, forming a triangle of interconnected VPN tunnels. This setup can provide redundancy, load distribution, and multiple paths for traffic to flow.
Using IPsec VPN tunnels on FortiGate firewalls, you can achieve this setup. Here's a brief overview of how it could work:
-
Site A, Site B, and Site C:
- Each site should have a FortiGate firewall (or equivalent device) capable of setting up IPsec VPN tunnels.
- Each site will establish a site-to-site VPN tunnel with the other two sites.
-
VPN Tunnels:
-
At Site A:
- Establish an IPsec VPN tunnel to Site B.
- Establish an IPsec VPN tunnel to Site C.
-
At Site B:
- Establish an IPsec VPN tunnel to Site A.
- Establish an IPsec VPN tunnel to Site C.
-
At Site C:
- Establish an IPsec VPN tunnel to Site A.
- Establish an IPsec VPN tunnel to Site B.
-
