Avaya VSU 10000, Administrator'S Manual

Page: 12 / 44

1-2 Introduction
VSU-10000 User Guide
Security
The VSU-10000 provides data stream privacy by employing cryptographic
algorithms and keys powerful enough for the most sensitive business
communications. It supports DES and Triple DES encryption, as well as the
ISAKMP key management standard. SKIP is not supported in this product, nor is
VPN Remote Client version 2.5.X.
Data authenticity is assured by using HMAC-MD5
™
or HMAC-SHA-1 packet
signatures to reject altered or forged packets. All security mechanisms employed
by the VSU-10000 conform to IPSec standards, in order to provide
interoperability and broaden the use of VPN technology.
Performance
The VSU-10000 supports IP over 10/100/1000BASE-T local area networks.
When packets are encrypted and authenticated according to IPSec protocol
guidelines, additional bytes—in the form of IPSec headers—must be added to
packets. In many cases, the additional packet overhead imposes a performance
penalty in return for security. The extra bytes tend to lengthen packets and reduce
the throughput (measured in packets per second). Of even greater impact is the
tendency for packets lengthened by IPSec headers to be fragmented by network
routers, causing further reductions in performance and additional latency. Real-
time compression performed by the VSU-10000 reduces packet fragmentation
and produces smaller packets, which can significantly enhance network
throughput and performance.
Plug-and-Play Installation
The VSU-10000 can be placed anywhere in a 10/100/1000BASE-T LAN to
provide VPN functionality. Native support for IP ensures that the VSU-10000
interoperates transparently with the broadest range of intranet and other network
applications.
The graphical VPNmanager™ (available separately) network management
application steps network managers through the setup process and allows them to
configure a VPN in minutes. The VPNmanager also supports extensive facilities
for VPN monitoring and troubleshooting, and for establishing multi-company
extranets. In addition, the VPNmanager may also be used to force the link speed
on the VSU-10000. The VSU-10000 provides support for the RADIUS protocol,
enabling VPNs that support thousands of remote users and a variety of
mechanisms for remote user authentication.