Alternative Implementations
The implementation examples shown so far have been based on the small network design model in which the small network is being used in a standalone or headend configuration.If the small network is considered a branch of a larger network, the implementation of the small network in this design model is slightly different than that previously discussed. These differences are as follows:
- Corporate resources are normally centralized at the corporate headquarters; therefore, the use of a local public services segment is redundant. Under this circumstance, all related configuration is removed.
- To provide site-to-site connectivity between offices, IPSec over Generic Routing Encapsulation (GRE) can be used. If you use GRE, you must amend cryptographic parameters to allow IPSec transport mode to be used and then modify the associated filtering to reflect this change.
- Remote users normally terminate at the corporate headquarters rather than on the small network. Under this circumstance, all related configuration is removed.
