Firepower 2110 Hub and Spoke Topology with different preshared keys

[lsalazarv44]

Hello !!

I need to simulate a Hub and Spoke topology with several Point to Point topology VPNs using a Firepower 2110 as the Hub. The reason is the spokes must use their own particular preshared keys and IKE & IPsec policies. Is it possible to have Spoke to Spoke traffic ????

[Marvin Rhoads · Accepted solution]

Not by default. That is, it is possible only if you explicitly allow it.

The traffic would have to traverse the hub and be allowed by the crypto maps (and NAT-exempted) at the hub, spoke 1 and spoke 2.