Overview

A company has two sites linked to each other by 3 access routers: The agency, exclusively comprising client workstations, accesses server resources hosted at the head office in this way:

• Access to intranet web portals and file transfers via FTP,
• Usage of "production" applications (e.g.: access to SQL database servers),
• Communication by VoIP via the head office's PBX servers.

The company wishes to secure these three types of traffic using encryption in IPsec tunnels. It has also chosen to implement redundancy between the 3 links in order to ensure service continuity for "production" traffic and VoIP.