AutoVPN

The AutoVPN (Automatic Site-to-Site VPN) application automatically creates complex site-to-site VPNs for a large number of store endpoints. Each store's edge security device (ESD) initiates a connection to an ESD that acts as a dedicated responder, usually at the home office. The application handles multiple segments on the initiator (store) side and multiple complex segments on the responder (home office) side, including non-local segments.

Where to find it

To see this application's reports and company-wide settings for all your sites, select AutoVPN from the Apps menu. The page is titled Automatic Site-to-Site VPN.

Company-wide settings

The AutoVPN company page has Reports and Settings. Settings lists the Responders (each with a responder location, WAN IP address, responder LAN segment, and a pre-shared key that can be regenerated) and Tunnels for Initiator Segments, where you choose which network segments get tunnels.

Scale Computing manages these company-wide settings as part of the managed service. To request a change, contact Scale Computing Support.

Features

• Responders support up to 400 tunnels.
• Responders support up to 750 Mbit/s throughput.
• IKE version 2
• Diffie-Hellman group 24
• SHA2_256 HMACs (Cisco "integrity sha256")
• AES256 encryption (Cisco "encryption aes-cbc-256")
• Supports multiple contiguous or disjoint segments on the initiator side.
• Supports multiple contiguous or disjoint segments on the responder side.

Installation

AutoVPN requires a master configuration.

1. In the SC//AcuVigil dashboard navigation bar, open the Apps menu and configure the AutoVPN master configuration.

Getting the application

Scale Computing installs AutoVPN on your sites as part of the managed service. To change its settings, contact Scale Computing Support. To add it to a site, open a ticket in the SC//AcuVigil dashboard, email team@scalecomputing.com, or call (512) 687-7401.

System requirements

• Scale Computing ESD: MG3, SG1v1, SG2v1, XG1v1, or VG

Available reports