Adjusting VPN-specific site settings for gateways

Site elements allow you to adjust how the Site is used in each VPN.

Before you begin

Manually added Site elements to VPN Gateways.

Select Engine Configuration.
Open the list of sites for the gateway in one of the following ways:
- Right-click an Engine, select Edit <element type>, then browse to VPN > Sites.
- Browse to Secure SD-WAN Configuration > VPN Gateways, double-click the External VPN Gateway element, then click the Sites tab.
Right-click a manually added Site, then select Properties.
Configure the settings.
Save the changes in one of the following ways:
- In the Engine Editor, click Save and Refresh.
- In the External VPN Gateway Properties dialog box, click OK.

Use this dialog box to view or edit the properties a VPN site.

Option	Definition
General tab
Name	The name of the element.
Comment	An optional comment for your own reference.
Search	Opens a search field for the selected element list.
Up (Backspace)	Returns to the previous folder.
New	This option is not available in this dialog box.
Tools	Show Deleted Elements — Shows elements that have been moved to the Trash. Expand All — Expands all levels of the interface tree. Collapse All — Collapses all levels of the interface tree. Refresh View — Updates the view.
VPN References tab
VPN	Shows the VPNs where this site is used.
Enable	When selected, the site is enabled in the specified VPN.
Mode	Defines the mode for the Site for each VPN in which it is enabled. Normal — Use this mode for all active Site elements that do not require one of the other two modes. Private — (VPN Gateways on Engines only) Use this mode for the local untranslated addresses when addresses are translated using NAT in the VPN. You must include the translated IP addresses (the addresses that the other end sees) as a Normal-mode Site element in these types of VPNs. If NAT is disabled in the VPN, any Sites in the Private mode are ignored. Hub — Use this mode on a hub gateway in tunnel-to-tunnel forwarding. Hub mode Sites contain the IP addresses of the networks that are behind the remote spoke gateways (the networks between which the hub gateway forwards traffic). The automatically generated Site cannot be used as a Hub Site.