14 Working with VPNs196 Nokia IP40 Security Platform User’s Guide v1.1VPN Routing Between Two Nokia IP40 Security PlatformsVPN Routing is a feature which is designed to fulfill the need for gateways to encrypt with eachother indirectly, via a central VPN-1 Module which acts as a VPN Router by decrypting thetraffic coming from one gateway and encrypting it to forward to another gateway. This feature isvery useful in many scenarios such as: DAIP (VPN-1 Module with a Dynamic IP address) to DAIP encryption: Since the DAIPModules are not aware of each others dynamically assigned IP address, one solution is toforward traffic through a central VPN-1 Router, to which both DAIP modules connect. Mimicking the architecture of Frame Relay networks for an easier migration from traditionalnetworks to IP based network using IPsec VPN. Enabling simple configuration for branch offices by hiding from it the entire network whileallowing them full connectivity.Mesh VPN SupportThis section explains mesh VPN support between different Nokia IP40 Security Platforms usingCheck Point R55 with HotFix 4 and above.The Nokia IP40 Security Platform supports mesh VPN topology using Check Point wheredifferent IP40 Security Platforms are configured as site to site VPNs within a mesh topology.The limitation in this scenario is that the IP40 configured on Check Point should have a staticWAN IP address.
