A Good Document Helps You Build Site2Site VPN

Building up a site to site IPsec VPN is not a hard thing to do. But of course you have to understand the principles at first. If you already knew what the two phases of negotiations are, now you can jump directly to the next graph. Otherwise, you should start from learning some fundamental VPN knowledge and terminologies like IKE, IPSec, Transform set, Crypto…

Based on my personal experience, a good document can always help you to build up a site to site VPN in an efficient way. Firstly, talk to the guy who is working with you on the other side and reach to an agreement on the settings which will be programed into the firewall, such as the encryption method, Hash algorithm, pre-shared key, external/internal IP addresses. Secondly, input those information into a spreadsheet or just use my template dispalyed as below, and send a copy to that guy. At last,  configure your firewall and test it.

Site-to-Site IPSec VPN Details