Before creating a recovery server or a primary server, a VPN connection to the cloud recovery site must be set up. The VPN connection uses two virtual machines:
A VPN appliance, located on your premises.
A VPN server, located on the cloud recovery site.
The VPN appliance enables connection between the cloud recovery site and your local network. In case the local network is down, you need the capability to connect directly to the VPN server.
The diagram below illustrates the methods of connection to the cloud recovery site and translation of IP addresses in the failover and test failover modes.
In the failover mode (as shown), a recovery server is connected to the production network and assigned the production IP address.
In the test failover mode, a recovery server is connected to the isolated test network and also assigned the production IP address. However, to access the server via VPN, you must use the test IP address. The VPN server replaces the test IP address with the production IP address within the test network.
If the recovery server has a public IP address, it is also translated to the production IP address in both the failover and test failover modes.