This topology uses the customer’s or service provider’s existing Internet circuits. The IPsec tunnels are usually terminated directly on the customer’s or service provider’s firewall or VPN device. This topology is typically used when the Peeredge Switches are hosted in the 46Labs Public Cloud and:
A media flow-around (anchor media disabled) design is required.
The PBXs are configured with private IP addresses and do not fully support Network Address Translation (NAT).