India 30-Branch Rollout
A bank must connect 30 branch offices across India to its Mumbai data centre and the Chennai DR data centre over IPsec. You run it like a real change: design, pre-checks, a pilot branch, then waves, with faults hidden in the sites.
The network you will build
Branch 1 (Pune) has only an internet connection. The Mumbai and Chennai data centres are already live. Your job: connect the branch to both data centres with secure IPsec tunnels, so staff can reach the bank servers. Mumbai is the main path, Chennai is the backup.
What you will do in the lab
- 1Check before you start
From the branch firewall, ping the ISP and both data centres. If any of them does not answer, you do not start the change. - 2Build two tunnels
Create the IPsec tunnels from the branch to Mumbai and to Chennai with the given security settings. - 3Set the routes
Send Mumbai traffic through the Mumbai tunnel and Chennai traffic through the Chennai tunnel. Add a backup route so Mumbai traffic can use Chennai if Mumbai fails. - 4Allow the traffic
Write the firewall policies that let the branch LAN talk to both data centres. This also brings the tunnels up. - 5Prove it works
Ping the Mumbai and Chennai servers from the branch PC and confirm both tunnels are up.
Every task is checked automatically from your real configuration. Stuck? Each task has a hint.
Keep this handy: addresses and settings
After the pilot: the other 29 branches
Once branch 1 works, the same configuration is reused for every branch with only the numbers changed. Pick a branch to see its addresses.
Coming next in this project: pushing the template to waves of branches, and finding faults hidden in a few of them.