The simple VPN topology consists of several VPN spokes (branch offices) connected via the Internet to the VPN hub (Main Office).
In this topology:
The Broadband Internet connection uses cable or DSL modem, with a static public IP address
There is a VPN tunnel from each spoke to the VPN hub over the Internet
Only VPN traffic is allowed via the Internet connection