Example

This example will demonstrate how to delegate VPN management from an un-configured master Smoothwall to an unconfigured secondary Smoothwall. The secondary Smoothwall is responsible for managing site-to-site and road warrior connections within its own geography.

This example covers configuration from scratch. Therefore, you must follow the instructions from the step most appropriate to your current level of VPN connectivity.

1. Firstly, create a tunnel to link the master Smoothwall to the secondary Smoothwall, see our help topic, Creating a tunnel to link the master Smoothwall to the secondary Smoothwall Filter and Firewall.
2. Create the primary site-to-site link, see our help topic, Create the primary site-to-site link.
3. Create an additional Certificate Authority on the secondary Smoothwall system, see our help topic, Create an additional Certificate Authority on the secondary Smoothwall Filter and Firewall.

This additional Certificate Authority is used to create another local certificate for the secondary Smoothwall, and certificates for any further site-to-site or road warrior connections that it is responsible for managing.