The configuration of this scenario involves the following steps with the home-office router:
- Configuration of the private Internet access, for example with the LANconfig Wizard or with WEBconfig.
- Configuration of the Internet access that is invoiced to the headquarters.
- Selection of the private provider for the default route in the IP routing table (e.g. manually with LANconfig or with the Wizard for selecting Internet providers in WEBconfig.
- Configuration of the VPN connection to the network at the headquarters.
- Assignment of the VPN connection to the headquarters' provider. To ensure that the data traffic for the headquarters is routed via the desired Internet provider, one more entry in the IP routing table is required. Here, the VPN gateway at the headquarters is entered along with its fixed IP address and appropriate netmask, and is forwarded to the remote site used by the headquarters' provider.
Note: It is important that the route to the Internet provider used at the headquarters is masked; otherwise the device would apply the LAN address and not the WAN address, and the connection would never be established.
Further information about these steps in the configuration are to be found in the documentation for your device.
Note: Administrator rights for the employee in the home office: To avoid the employee making accidental changes to the settings for the Internet provider or VPN access, he should be assigned the WEBconfig function rights for the "Internet connection" and "Selection of Internet provider" Wizards only.
Note: Use the necessary filter rules in the area 'Firewall/QoS' to ensure that the Internet traffic is not accidentally directed via the network at the headquarters.
