Full Overlap

In the figure below, the encryption domains of Gateway A and Gateway B fully overlap - this means that they are identical.

Item

Description

1

Remote Access Client

2

Internet

3

Gateway A

3E

Encryption Domain for Gateway A

4

Gateway B

4E

Encryption Domain for Gateway B

When the client attempts to create an encrypted connection with one of the hosts in the encryption domain, it chooses a gateway based on the configured MEP settings.

  • If the MEP setting is First-to-respond (the default), the client tries to connect to both gateways. The encrypted connection is created with the first gateway that responds.

  • If the MEP setting is Load Distribution, the client randomly selects a gateway.