BinTec X3200, User Manual

Page: 256 / 419

256 BinTec Communications AG
Advanced Configuration
6
6.5 Extra License Functions
This chapter briefly describes the X3200 features you can activate with extra li-
censes.
6.5.1 Virtual Private Network (VPN) and Encryption
X3200 can provide a VPN using the PPTP (Point to Point Tunneling Protocol).
This provides safe (encrypted) transmission of data over WAN connections,
e.g. over the Internet. It could be used, for example, to provide field service staff
with low-cost access to data in the company network via Internet and laptop (di-
aling in via a local Internet Service Provider).
A VPN license implicitly includes the DES and Blowfish encryption processes
(see chapter 7.3.1, page 305 ).
You can find detailed information and configuration instructions (with examples)
in the Software Reference.
6.5.2 IPSec (Internet Protocol Security)
A growing number of enterprises handles growing amounts of data communi-
cation over the internet. To make sure that data remain confidential and cannot
be read or misused by any third party, these enterprises make use of encryption
technology. A number of - partly standardized - encryption methods has been
developed, forming the basis for different VPN (Virtual Private Network) solu-
tions. Over the last few years, PPTP (Point to Point Tunneling Protocol) and IP-
Sec have emerged as the most promising methods. X3200 supports both of
them.
While PPTP transfers data through a tunnel on the second layer of the OSI
Model, IPSec operates on layer three. All data is encrypted with keys of up to
168 bit length. Furthermore, IPSec offers the possibility of authenticating and
administration of encryption keys. Since it operates on level three, it is entirely
transparent for the user, i.e. that data is encrypted without the user’s active par-
ticipation. Encryption and the negotiation of the corresponding encryption keys