Avaya 3050-VM, User Manual, Page: 25 / 274

Networking
• Supports creating multiple interfaces within a cluster, for example, to separate client traffic
and management traffic.
• Support for clustering over multiple subnets.
• Supports assigning two physical network ports to one interface, to create a port failover
(high availability) solution where one VPN Gateway is attached to two Application
Switches.
Secure Service Partitioning
The AVG software provides the ability to partition a cluster of VPN Gateways into separate
VPNs. This gives service providers (ISPs) the possibility to host multiple VPN end-customers
on a shared Remote Access Services (RAS) platform. Requires a license.
• Supports hosting of up to 250 public termination points for end-customer SSL and IPsec
VPNs.
• Secure VPN binding. Each VPN is bound to a private IP interface. VLAN tagging can be
used when private IP address spaces overlap.
• Private network authentication. Existing authentication servers within the customer's
private network can be used.
• Access control. Unique access rules can be specified for each user group in the various
VPNs.
• Private network name resolution. If desired, private network DNS servers can be mapped
to the VPN.
• Split administration. VPN Portal management is enabled for each VPN customer through
a web interface, without exposing global administration access.
• High availability. The Secure Service Partitioning solution is compatible with the AVG
cluster's high availability solutions.
Branch Office Tunnels
The AVG software provides the ability to configure IPsec-based branch office tunnels. Several
peer-to-peer branch office tunnels can be configured for each virtual private network (VPN).
Software Features
User Guide April 2013 25