I have a client with 5 sites, each using their own private LAN subnet.
They are currently using a service provider to link their branches and for Internet breakout centrally. I need to break them out to the Internet temporarily at another branch, over the existing WAN. I cannot configure the current WAN. My plan is to drop SRX devices at the 5 sites and give them a local LAN IPs, then create a VPN tunnel to the main SRX's local LAN IP. Then route traffic to the main site and breakout to the Internet at the main site.
Since they can ping and route to each over over the existing WAN, this should work?
Can I terminate the VPN on the local LAN IP? I will have to create static routes on the site SRXs to use the existing site gateways to get to the main SRX to initialise the tunnel, and then route all other traffic over the tunnel?
Can I get some pointers?
I have played around with some success, some tunnels did connect but data not flowing etc.. I need to get my head around this first..