This topology uses the customer’s existing internet circuits. The IPsec tunnels are usually terminated directly on the customer’s firewall or VPN device. This topology is typically used when Peeredge Switches are SBC is hosted in the 46 Labs public cloud and:
a media flow-around (anchor media disabled) design is required.
the PBXs and customer end-points are configured with private IP addresses and do not fully support Network Address Translation (NAT).
PROs
CONs