Nortel Contivity 1050, Configuration Manual

Page: 124 / 178

124 Chapter 6 Configuring branch office tunnels
NN46110-500
DNS for branch office tunnel endpoints
When configuring branch office tunnels with the Nortel VPN Router, you can
enter a DNS name for the tunnel endpoint. The Nortel VPN Router uses domain
name address resolution to resolve the actual IP address of the endpoint. The
Nortel VPN Router client already supports this ability.
The Nortel VPN Router provides the following DNS services:
• VPN DNS allows asymmetric branch office tunnels (ABOT) to be configured
using domain name for remote peer rather than IP address.
• Round Robin DNS provides a form of failover and load balancing.
VPN DNS
IPSec asynchronous branch off tunnels on the Nortel VPN Router can be
configured to use DNS name of a remote peer rather than IP address. In
Figure 22
on page 125 . the initiator from the branch office brings up a tunnel to a responder
in the central office. Without the VNP DNS, the initiator needs to know the IP
address of the responder and reconfigure the address every time address changes.
With VPN DNS, the initiator can refer to the remote side by its name. Thus, when
the IP address changes, no reconfiguration on initiator sites is required. This
reduces the configuration time and simplifies the management. The Nortel VPN
Router client supports this feature and the client can use the Nortel VPN Router
domain name to bring up an IPSec user tunnel.