Nomadix AG-2000W, User Manual, Page: 111 / 254

N
OMADIX
AG-2000
W
™ / AG-2000
WA
™
System Administration 107
Enabling Secure Management {VPN Tunnel}
There are many different ways to configure, manage and monitor the performance
and up-time of network devices. SNMP, Telnet, HTTP and ICMP are all common
protocols to accomplish network management objectives. And within those objectives
is the requirement to provide the highest level of security possible.
While several network protocols have evolved that offer some level of security and
data encryption, the preferred method for attaining maximum security across all
network devices is to establish an IPSec tunnel using 3DES between the NOC
(Network Operations Center) and the edge device (early VPN protocols such as PPTP
have been widely discredited as a secure tunneling method).
As part of Nomadix’ commitment to provide outstanding carrier-class network
management capabilities to its family of public access gateways, we offer secure
management through the NSE’s standards-driven, peer-to-peer IPSec tunneling with
strong data encryption. Establishing the IPSec tunnel not only allows for the secure
management of the Nomadix gateway using any preferred management protocol, but
also the secure management of third party devices (for example, WLAN Access
Points and 802.3 switches) on private subnets on the subscriber side of the Nomadix
gateway.
The advantage of using IPSec is that all types of management traffic are supported,
including the following typical examples:
‹
ICMP - PING from NOC to edge devices
‹
Telnet - Telnet from NOC to edge devices
‹
Web Management - HTTP access from NOC to edge devices
‹
SNMP
Œ
SNMP GET from NOC to subscriber-side device (for example, AP)
Œ
SNMP SET from NOC to subscriber-side device (for example, AP)
Œ
SNMP Trap from subscriber-side device (for example, AP) to NOC
Several standard configuration options have been pre-set in the AG-2000w that will
be accepted from the IPSec termination server. These are:
‹
Hash algorithm: MD-5, SHA
‹
Phase 2 encryption: 3DES
‹
Diffie-Hellman: Group 2
‹
Security Association Lifetime (Default 28800 seconds)
‹
Perfect Forward Secrecy (PFS)
At the time of this writing, the VPN Tunnel menu item is still in
development and may not appear in your product.