Site-to-Site VPN · Your site to another network
Join a site to your head office, safely and in plain words
A Site-to-Site VPN tunnel joins the Simply5 Gateway at your site to a network on somebody else’s firewall: your head office, a data centre or a vendor. The tunnel only makes the path. Nothing crosses it until you write a rule that allows it.
Included with every plan
Part of what the Simply5 Gateway does as your router, like Port Forwarding and Access Control. There is no add-on to buy.
Works with the firewall the other side already has
You do not need a Simply5 Gateway at the far end. The tunnel speaks what their firewall speaks.
IPsec or WireGuard
Choose the kind when you make the tunnel. IPsec suits most company firewalls; WireGuard is there for the ones that offer it.
Keys kept out of sight
A shared key can be replaced but never read back. For WireGuard the gateway makes its own key pair, and the private half never leaves it.
A name that follows your internet
Your site has its own internet name, which follows it from one internet line to the next. The other side points at the name.
Behind another router too
The gateway starts the connection itself, so a site without a public address of its own can still hold a tunnel.
Choose which networks ride it
Name the networks on the other side and pick which of your site’s private networks use the tunnel.
Settings for the other side
One sheet with everything their IT team must match, ready to copy into an email. It never contains the key.
A tunnel that is up carries nothing by default
What crosses is decided in Access Control, with the same rules you already use between your own networks.
Allow by rule
Let Staff LAN reach the head office’s servers, on remote desktop only. Access can be as narrow as one computer.
The other side, only if you say so
The head office reaching a recorder at your site is its own rule. Without one, nothing comes in.
Services and hours
A rule can name the service it allows and the hours it applies, like every other Access Control rule.
Private networks only
Only your site’s private networks can use a tunnel. Guest and sign-in networks never can.
Stage, then Save and push
Changes are staged and listed before they reach the gateway, so you see what will change before it does.
Know why it is down, not just that it is
The page reads each tunnel live from the gateway and says what it finds in your terms.
Status in plain words
Connected, Connecting, Partly connected or Not connected, and Connected, nothing allowed yet when no rule names the tunnel.
The reason, and what to do
No reply from the other side, a key that does not match, security settings or networks that differ: each has its own line and its fix.
Test connection
The gateway pings an address on the other side and shows the replies, so you know the tunnel passes traffic.
Reconnect, or switch off
Start a tunnel again with one button. Switch one off and its settings and rules are kept for when it comes back.
Where it does not apply
It is switched off at a site that reaches the internet through a Firewall Lane, and the two sides must use different address ranges.
A record of every change
Who saved, switched or reconnected a tunnel, or replaced its key, is kept in the site’s audit record.
Goes with
Each of these builds on the Simply5 Gateway at your site and is run from the same console.
More than one gateway at a site
Additional Gateway
An add-on to the Campus suite
Additional Gateway in detailFrom order to live
- 1
Open Site-to-Site VPN
In your site console, under Settings, Advanced Settings. The page shows your site’s internet name and address to copy.
- 2
Add a tunnel
Enter the other side’s address, its networks and the key, and pick which of your networks use it.
- 3
Send the settings
Copy Settings for the other side into an email to their IT team. Share the key separately.
- 4
Allow what should cross
Write an Access Control rule, then Save and push. The page shows Connected when both sides agree.
What you get
Included
- IPsec and WireGuard tunnels to a firewall of any maker
- Access Control rules in both directions
- Live status with the reason a tunnel is down
- Test connection and Reconnect
- A settings sheet for the other side’s IT team
- An audit record of every change
Order online in India. Hardware ships to your site, ready to plug in.
Ready when you are.
Order online and your Simply5 Gateway ships already tagged to your order, ready to plug in.
Order online in India. Hardware ships to your site, ready to plug in.