Networking

Site-to-Site IPsec VPN Tunneling

Network Design diagram · made in Skemio

Network diagram showing branch client and router connecting through an encrypted IPsec ESP tunnel across the internet to an HQ gateway and server.
Network diagram showing branch client and router connecting through an encrypted IPsec ESP tunnel across the internet to an HQ gateway and server.
Open it in SkemioMake your own

What it shows

  • Encapsulating Security Payload (ESP) encrypts original L3 packets completely.
  • Tunnel mode wraps packets with a new routable header to hide internal IPs.
  • Phase 1 (IKE) negotiates trust; Phase 2 builds secure unidirectional SAs.

The takeaway

IPsec tunnel mode provides end-to-end confidentiality across any untrusted broadband transport.

More network design diagrams