ii
VSU-5000 User Guide
Data authenticity is assured by using MD5
™
or SHA-1 hashing to reject altered
or forged packets. All security mechanisms employed by the VSU-5000 conform
to IPSec standards, in order to provide interoperability and broaden the use of
VPN technology.
Performance
The VSU-5000 supports IP over 10BASE-T or 100BASE-T local area networks
(LAN). Up to 5000 concurrent site-to-site IPSec sessions are supported. When
packets are encrypted and authenticated according to IPSec guidelines, additional
bytes—in the form of IPSec headers—must be added to packets. In many cases,
the additional packet overhead imposes a performance penalty in return for
security. The extra bytes tend to lengthen packets and reduce the throughput
(measured in packets per second). Of even greater impact is the tendency for
packets lengthened by IPSec headers to be fragmented by network routers,
causing further reductions in performance and additional latency. Real-time
compression performed by the VSU-5000 eliminates packet fragmentation and
produces fewer, smaller packets, which can significantly enhance network
throughput and performance.
Plug-and-Play Installation
The VSU-5000 can be placed anywhere in a 10/100BASE-T LAN to provide
VPN functionality. Native support for IP ensures that the VSU-5000
interoperates transparently with the broadest range of intranet and other network
applications.
The graphical VPNmanager™ (available separately) steps network managers
through the setup process and allows them to configure a VPN in minutes. The
VPNmanager also supports extensive facilities for VPN monitoring and
troubleshooting, and for establishing multi-company extranets. The VSU-5000
provides support for the RADIUS protocol, enabling VPNs that support
thousands of remote users and a variety of mechanisms for remote user
authentication.
How This Book Is Organized
Chapter 1,
Preparing for Installation
, includes safety, environmental, and
equipment requirements, as well as guidance in planning a VSU-5000
installation.