3Com 3C8S5007 - SuperStack II PathBuilder S500..., User Manual

Page: 70 / 190

70 C
HAPTER
5: C
ONFIGURING AND
M
ONITORING
V
IRTUAL
P
RIVATE
N
ETWORKS
3 Configure the RAS service to allow authentication of the user by a server,
such as a RADIUS server (see the Configuring Remote Access Services
chapter in
Using Enterprise OS Software ).
The firewall and RAS functions can also be configured on the PathBuilder
switch. The configuration example in Figure 18 shows these services
being performed on separate devices, for purposes of clarity.
Example 2 In Figure 19, the remote workstation is configured to create a tunnel
directly to the central site.
Refer to the documentation for your workstation or consult your
operating system vendor for instructions on how to configure your
workstation as the remote PPTP/L2TP client.
Figure 19 Remote Workstation to Central Site Tunnel
The connection process typically follows this order:
■
The remote client dials the ISP.
■
The ISP assigns an IP address to the client.
■
The remote client sends data to the IP address of the central site.
■
The Windows 95/NT workstation client creates a PPTP tunnel to the
central site based on authentication data.
■
The central site checks its authentication server to verify that this user
can access the network and forwards the data.
Remote
workstation
Central site
PPTP or L2TP tunnel
Firewall
or CSU/DSU
(optional)
ISP
Authentication
server
Authentication
server
PathBuilder
switch