Nortel BCM 3.7, Manual

Page: 784 / 1004

784 IPSec
N0008589 3.3
IPSec Remote User configuration
The IPSec Remote User feature allows remote users to dial in to an Internet Service Provider (ISP)
anywhere in the world and connect to the corporate network in a secure way. All the remote user
requires is an IPSec VPN client installed on their computer. This removes the need for the
traditional corporate remote access environments where banks of modems were employed to
handle incoming service requests.
The IPSec VPN client you require for Business Communications Manager is version 4.60 of the
Contivity VPN IPsec remote access user client software. To obtain a copy of this client software,
contact your authorized Business Communications Manager distributor. The Contivity VPN IPsec
remote access user client software is a Windows application available for the latest releases of
Windows 95, Windows 98, Windows NT Workstation, Windows NT Server, Windows 2000 and
Windows XP. This client software comes with complete online Help.
IPSec Remote User Authentication
Business Communications Manager only supports User Name and Password authentication from
the VPN Client. The authentication method used is local NT Authentication. No other form of
Authentication is supported. Business Communications Manager does not support Contivity
Group ID authentication.
Split Tunneling
All client traffic is tunneled through the Business Communications Manager by default. Split
Tunneling allows you to configure specific network routes that are downloaded to the client. Only
these network routes are then tunneled. Any other traffic goes to the local computer interface. Split
tunneling allows you to print locally, for example, even while you are tunneled into the Business
Communications Manager.