H3C Technologies H3C Intelligent Management Center - Manual (Page 25)

15
Determining network scenarios
For security and confidentiality purposes, enterprises and organizations build VPNs over IPsec to secure
Layer 3 communication among the headquarters and branches, as shown in
Figure 19 .
Figure 19 VPN for headquarters and branch networks
A typical VPN includes a hub and multiple spokes.
• Hub—Egress device on the headquarters network.
• Spoke—Egress device on a branch network.
IVM supports the following VPN network scenarios, according to the manageability of the spokes:
• Static network—The hub and all spokes use static IP addresses and are managed by the IMC
Platform.
• Branch network—The hub uses a static IP address. All spokes obtain IP addresses dynamically, or
they are located behind a NAT device or a firewall. The spokes are managed by IMC BIMS, but
cannot be managed by the IMC Platform.
• Hybrid network—The hub and some spokes use static IP addresses. Other spokes obtain IP
addresses dynamically, or they are located behind a NAT device or firewall.
Installing and deploying IMC components
As shown in Figure 20 , the NMS is deployed on the headquarters network. To use IMC as the NMS,
deploy IMC components according to the VPN network scenario.