Bay Networks Bay Dial VPN, Configuration And Troubleshooting Manual

Page: 23 / 186

Planning for Dial VPN
115623B Rev. 00 BayStream Multiservice Software Version 7.2 1-3
Figure 1-1. Dial VPN Network Providing Connections to Different Destination Types
Figure 1-1 shows a Dial VPN service provider network with a gateway that
provides connection services both to a corporate LAN and to a third-party Internet
service provider network. While this figure shows only one tunnel, in reality Dial
VPN creates one tunnel for each dial-in connection.
In this illustration, a user at a remote node can dial in to a corporate or home
network or a third-party ISP by calling a phone number associated with that
destination network. The network access server handles the call. The service
provider’s network uses a standard IP connection between the remote access
server, shown here as a 5393 module in a 5000 MSX chassis, and the gateway. A
frame relay PVC and a static route must exist between the gateway and the
customer premise equipment (CPE) router to provide a path for packets to return
to the remote node.
Tunnel
CPE
Network
access
server (NAS
Gateway
PPP
connection
Service
provider network
DVS0012A
Remote
node
TMS /erpcd
server
Frame Relay
PVCs
PSTN
CPE
CPE
LAN
Third-party
internet
service
provider
network
Internet
Customer
RADIUS
server
Third-party
ISP
RADIUS
server
Tunnel
domain
data
User
data
Customer
Network