IPsec hub-and spoke config

[nkariyawasam]

I am going to setup IPsec connections between head office and branches

(around 300).

What is the most scalable approach for this Hub-and-spoke configuration ?

[smahbub]

here are some documents that explains about some of the good approaches available for configuring "Hub and Spoke" configuration.

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009463b.shtml

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080093bd3.shtml

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080093dc8.shtml

[k.modarresi]

You might want to consider implementing DMVPN (Dynamic Multipoint IPsec VPNs )scalable soultion for your Hub-and-spoke.

See below document on how to set up DMVPN.

http://www.cisco.com/warp/public/105/dmvpn.html