• Network Security Manager 2.5.0
• Network Security Manager Overview
  • About Network Security Manager
  • Related Documents
  • API Support
  • Legal Information
  • Conventions
    • Guide Conventions
    • UI Conventions
• Dashboard
  • Summary
  • Network
  • Threat
• Firewalls
  • Device Inventory
    • Device Status
      • Management Status
      • System Details
      • License Details
      • Zero Touch Status
      • Template and Firmware Versions
    • Managing Devices
      • Editing Device Settings
      • Multi-device Firmware Upgrade
      • Upgrading Firmware
      • Synchronizing Firewall Configuration with NSM
      • Creating Backup of Device Configuration
      • Manual Firewall Acquisition
    • Firewall View
  • Device Groups
    • Working with Device Groups
      • Creating Device Groups
      • Editing Device Groups
      • Creating Backup of Device-Group Configuration
      • Deleting Device Groups
  • Device Backups
    • Scheduling Backups
    • Archiving TSR
    • Archiving EXP
• Templates and Variables
  • Templates
    • Templates Inventory
    • Creating Templates
    • Editing Templates
    • Viewing Template Configuration
    • Creating Duplicate Template
    • Modifying Template Attributes
    • Applying Templates
    • View Template Status
    • Deleting Templates
    • Storage
  • Golden Template
  • Variable Data
    • Template Variables Overview
    • Add Variable
    • Edit Variable
    • Resolve Variable
    • Delete Variable
    • Using Template Variables
    • Creating Variables within Templates
• SonicWall Switch Configuration in Template
  • Add Switch
  • Edit Port
  • Switches
    • Network
    • Users
    • Static routes
    • 802.1x
    • Radius server
    • ARP
• Certificates
  • Navigating Certificates
  • New Signing Request
  • Commit and Deploy Certificate(s)
  • Configuring SCEP
  • Importing Certificates
  • Deleting Certificates
• Configuration Management
  • Approval Groups
    • Approval Workflow Settings
  • Approval Group Management
    • Searching the Approval Groups
    • Adding a New Approval Group
    • Editing an Approval Group
    • Deleting an Approval Group
    • Setting the Default Approval Group
  • Configuration Management Workflow
    • Committing and Deploying the Updates
      • Committing and Deploying Updates in the Firewall View
      • Committing and Deploying Updates to Device(s) in the Manager View
    • Viewing Pending Configuration Updates
    • Discarding Pending Configurations
    • Monitoring Commits
    • Managing Commits
      • Editing Commits
      • Redeploying Commits
      • Rescheduling Commits
      • Deleting Commits
    • Auditing Configuration Changes
• Tenants
• VPN Topology
  • IPsec VPN Topology
    • Topologies
      • Hub and Spoke Topology
      • Full Mesh Topology
      • Point to Point Topology
    • Security Associations
  • IPsec Monitor
  • Global Settings
• SD-WAN Topology
  • Configuring SD-WAN
  • Basic Information
  • Rules and Devices
    • Service Rule
    • Application Rule
    • Device Selection
• CSC Users
  • CSC User Status
  • Users
    • Sorting and Filtering
    • Editing CSC Users
  • Support Portal Users
  • Roles and Permissions
  • Authentication Servers
• Scheduled Reports
  • Managing the Schedules
    • Creating Scheduled Reports
    • Editing Schedule
    • Running Reports Manually
    • Setting the Report Date Range
  • Archived Reports
    • Downloading Archived Reports
• System Events
  • Configuring Log Settings
  • Alerts and Notifications
  • Configuring Twilio Setting for SMS
  • Viewing System Events
• SonicWall Support
  • About This Document

Hub and Spoke

Basic Information

• Topology Name : Enter a name to identify the Topology.
• Description : This field is a mandatory field to move to the next screen. You can enter a short description to identify the topology.
• Topology Type : Choose a type from the options :
  • Hub and Spoke - The network design where the central device is located.
• IP Version : The version of IP that can be used.
  • IPV4 - 32-Bit IP address which is numeric.
  • IPV6 - 128-Bit IP address which is alpha-numeric.
• Policy Type : Type of the policy
  • Site to Site - Choose this option if there is a connection between two or more networks
  • Tunnel Interface - Choose this option to create connection between peers and Virtual Tunnel Interfaces.

Setup Security Association

Choose a security association from the drop down list.
The list is displayed only if there are any existing security associations available. To know how to add security association, refer Adding Security Association.

Once the security association is selected from the list, two tabs appear which displays the information while creating the security association. For more information on how to add Security Association, refer Security Associations.

Setup Gateway

This screen allows you to add the topology type you selected in the previous screen.

Add Hub

1. From the Choose devices drop down, select devices that are part of a group. You can also search for the devices or groups in the list by typing the name in the input field.
   You can only select the devices that are part of a group.

   

2. After selecting a device, you are required to choose the following options
   1. Choose Devices - Choose devices from the drop down list.
   2. WAN Interface - From the drop down list, select WAN Interface.
   3. Primary Gateway - Enter the primary gateway in the text box.
   4. Secondary Gateway - Enter the secondary gateway in the text box.
   5. Local IKE ID Criteria - Click the radio button to choose from Firewall ID, IPV4 Address, Domain Name, Key Identifier, and Email Address.
   6. IKE ID - This field is auto-populated and cannot be edited.

   7. Protected Networks - From the drop down list, select the network. Click the Edit icon to add or edit Address Object and Group.

      

Add Spoke

1. From the Choose devices drop down, select groups or devices by checking the box. You can also search for the devices or groups in the list by typing the name in the input field. Click Apply to select the device. The devices that are selected are displayed in a list.
   Hub and Spokes should not have overlapping IP Addresses in any of the fields.

   

2. To use the common configuration, click Common Configuration icon.
   After selecting the common configuration, you are required to choose the following options :
   1. Reference Device - From the drop down list, select the reference device.
   2. WAN Interface - Choose WAN interface from the list. The options get enabled only after selecting Reference device.

   3. Local IKE ID Criteria - Click the radio button to choose from Firewall ID, IPV4 Address, Domain Name, Key Identifier, and Email Address.

      You can now add or create variable objects in common configuration. Click the variable icon and select new to create a new variable or choose an existing variable.

      

   4. IKE ID - This field is auto-populated and cannot be edited.
   5. Local Network - Enter the local network IPV4 address.
   6. Check the box to enable or disable auto-increment local network.
3. To edit the configuration of the device, go to the Action column and select Edit icon.

Summary

This is the last step to create a VPN Topology. It displays the summary of the selected hub and spokes with the Device Name, VPN Interface, Status and Errors. In case if there are any errors, you are required to view and resolve them before adding a topology.

Click Done to finish and exit the wizard or Previous to go back to the previous screen.