Deployment and Configuration
To set up the VPN infrastructure with Veeam PN and enable secure communication between remote sites and users, you must perform the following steps:
Site-to-Site Scenario
- Deploy and configure the network hub.
You must deploy the network hub in Microsoft Azure, Amazon AWS or in an on-premises site. The network hub is the core of the VPN infrastructure. The network hub manages incoming and outgoing traffic and provides clients with access to resources in the VPN. For more information, see Deploying Network Hub.
- Register Veeam PN clients.
You must register clients in the network hub portal. In the site-to-site scenario, clients are on-premises networks that you add to the VPN. For more information, see Registering Clients.
- Deploy and configure site gateways.
You must deploy a site gateway in every remote network that you add to the VPN (except the network in which the network hub is deployed). The site gateway is a virtual appliance that establishes a VPN tunnel with the network hub, which lets the VPN traffic to travel securely between remote sites. For more information, see Deploying Site Gateways.
- Add static routes for outgoing traffic on default gateways.
In every remote network that you add to the VPN, you must add a new route on the default gateway. The route must destine traffic outgoing from the network to the site gateway. For more information, see Adding Static Routes on Default Gateways.
Point-to-Site Scenario
- Deploy and configure the network hub.
You must deploy the network hub in Microsoft Azure, Amazon AWS or in an on-premises site. The network hub is the core of the VPN infrastructure. The network hub manages incoming and outgoing traffic and provides clients with access to resources in the VPN. For more information, see Deploying Network Hub.
- Register Veeam PN clients.
You must register clients in the network hub portal. In the point-to-site scenario, clients are standalone computers that must have access to the VPN. For more information, see Registering Clients.
- Configure standalone computers.
You must configure VPN settings on all standalone computers that must have access to the VPN. For more information, see Configuring Standalone Computers.