The configuration of this scenario involves the following steps with the home-office router:
- Configuration of the private Internet access, for example with the LANconfig Wizard or with WEBconfig.
- Configuration of the Internet access that is invoiced to the headquarters.
- Selection of the private provider for the default route in the IP routing table (e.g. manually with LANconfig or with the Wizard for selecting Internet providers in WEBconfig.
- Configuration of the VPN connection to the network at the headquarters.
- Allocation of the VPN connection to the headquarters' provider.
To ensure that the data traffic for the headquarters is routed via the
desired Internet provider, one more entry in the IP routing table is
required. Here, the VPN gateway at the headquarters is entered along
with its fixed IP address and appropriate netmask, and is forwarded to
the remote site used by the headquarters' provider.
Note: It is important that the route to the Internet provider used by the headquarters is masked; otherwise the LANCOM would apply the LAN address and not the WAN address, and the connection would never be established.
Further information about these steps in the configuration are to be found in the documentation for your LANCOM device.
Note: Administrator rights for the employee in the home office:
To avoid the employee making accidental changes to the settings for the
Internet provider or VPN access, he should be assigned with the WEBconfig
function rights for the "Internet connection" and "Selection of Internet
provider" Wizards only. Information about the configuration of special
user rights can be found in this addendum under .
Note: Use the necessary filter rules in the area 'Firewall/QoS' to ensure
that the Internet traffic is not accidentally directed via the network
at the headquarters.