Configuring the B02 Branch Office ip|engine
In "Use Case 2", B02 is connected to the Data Center through two tunnels, one over the Internet and the other one over the MPLS private network.
A third tunnel connects B02 to B01. For this reason, Port Forwarding must have been configured on the Internet Access router. This rule authorizes sending the UDP packets to the ip|engine on ports 500 (IKEv2) and 4500 (IPsec NAT Traversal). You must apply a static IP address to the B02 WAN1 interface.