VSR-30™ Installation Guide
19
E.4.3 Selective Layer Encryption in VPNs
Encore Networks has developed a proprietary technology, Selective Layer Encryption™
(SLE, patent pending), for VPNs that traverse a satellite network. SLE works with a satellite
groundstation’s performance-enhancing proxy (PEP) and maintains VPN security over
satellite networks. The use of SLE with PEP significantly increases IPsec performance over
satellite networks. (For a discussion of SLE and satellite networks, see the
BANDIT Products
Software Configuration and Maintenance Guide
.)
Figure 3
shows a sample satellite network combining PEP and SLE.
Figure 3. Sample Satellite Network Configuration Using Encore Networks’ SLE VPN
E.4.3.1 SLE Configuration
The BANDIT products can use the following types of VPN software:
• The BANDIT’s regular IPsec VPN software does not have SLE; all VPN tunnels in this
software are IPsec without SLE. (This is the software the BANDIT IP uses.)
• The BANDIT’s IPsec VPN software with SLE has everything; tunnels can use regular
VPN or VPN with SLE. (This is the software the VSR products use. This software is also
available in the BANDIT or the BANDIT Plus.)
The software for SLE differs slightly from the standard BANDIT software. However, the
menus do not differ, and configuration remains the same for most parameters in the
BANDIT.
