This installation is very similar to the simple hub and spokes installation, but instead of connecting to a single central site, the branch is also connected to several other branch sites by direct IPSec VPN tunnels. The configuration is therefore very similar to the previous one, duplicated several times.

In this topology:

• The Broadband Internet connection uses cable or DSL modem, with a static public IP address

• There is a VPN tunnel from each spoke to the VPN hub over the Internet

• There is a VPN tunnel from one spoke to another spoke

• Only VPN traffic is allowed via the Internet connection