Router Configuration

Router Configuration

The branch office router and the corporate office router must be configured for the site-to-site VPN connection.

A dial-up site-to-site VPN connection at the branch office router is configured as follows:
A demand-dial interface for the Internet connection is configured for the appropriate equipment (a modem or ISDN device), the phone number of the local ISP, and the user name and password to gain Internet access.

A demand-dial interface for the VPN connection with the corporate office router is configured for a VPN port (a Point-to-Point Tunneling Protocol [PPTP] or Layer Two Tunneling Protocol [L2TP] port), the IP address of the interface on the Internet for the corporate office router, and a user name and password that can be verified by the VPN server. The user name must match the name of a demand-dial interface on the corporate office router.

A static host route to the corporate office router is created that uses the ISP demand-dial interface.

A static route (or routes) for the IP network IDs of the corporate intranet is created that uses the VPN demand-dial interface.


The corporate office router is configured as follows:
A demand-dial interface for the VPN connection with the branch office router is configured for a VPN port (a PPTP or L2TP port). The demand-dial interface must have the same name as the user name in the authentication credential that is used by the branch office router to create the VPN connection.

A static route (or routes) for the IP network IDs of the branch office is created that uses the VPN demand-dial interface.