VPN Orchestrator

Zyxel_Kevin

VPN Orchestrator enables you to automatically create Virtual Private Network (VPN) connections between sites within an organization. This allows the Security Gateway of each site and the Nebula Devices behind it to communicate securely.

There are two topologies you can use when creating a site-to-site VPN, Site-to-Site and Hub-and-spoke, This article would take Site-to-Site scenario as example.

Topology:

Objective:

192.168.168.0/24 are able to communicate with 192.168.160.0/24

192.168.160.0/24 are able to communicate with 192.168.168.0/24

Test Item:

1)Navigate to "Organization-wide > Organization-wide manage > VPN orchestrator"

Enable the both VPN gateways and select the subnet(s) which you want to communicate each other.

2)We use the external interface as VPN WAN link by default

If you want to change the VPN WAN link, Please navigate to "Site-wide > Configure > Firewall > Site-to-Site VPN" , Select the Primary/Secondary interfaces which you want.

3)Navigate to "Organization-wide > Organization-wide manage > VPN orchestrator"

and click refresh button of your browser