IPSec Multi-instance
IPSec multi-instance is used to provide the firewall lease service to isolate internal networks of small enterprises.
As shown in Figure 1, headquarters of three small enterprises share a VPN gateway. The three enterprise networks must be isolated. IP addresses of each enterprise are planned independently, and therefore IP addresses on different private networks may overlap. The IPSec multi-instance function can be configured on the VPN gateway to bind IPSec tunnels of the three enterprises to different VPN instances. This ensures that packets with the same destination IP addresses can be correctly forwarded.
