From the ‘VPN Communities’ window, select the ‘New’ button on the bottom. Then select ‘Site To Site’ and ‘Star…’ The ‘Star Community Properties’ page will appear.
On the ‘Star Community Properties’ page, enter the VPN name in the ‘Name:’ field. In this example, the ‘Name:’ is "HUB- TEST" which needs to be the same as the SNWL Identifier setup in the VPN SA on the Spokes.
For the ‘Enable VPN routing for satellites’ you need to select the option ‘To center, or through the center to other satellites, to internet and other VPN targets. ’
At the Community Traffic Security Policy it is necessary to have the checkbox ‘Accept all encrypted traffic’ ticked. Next, click on ‘Central Gateways’.
On the Central Gateways, click on the ‘Add…’ button under the ‘Central Gateways:’ section. This will bring up the ‘Central Gateways’ window. Select here the address object ‘cpmodule’ and press OK.
19