3Com 3C8S5007 - SuperStack II PathBuilder S500..., Руководство пользователя

Страница: 72 / 190

72 C
HAPTER
5: C
ONFIGURING AND
M
ONITORING
V
IRTUAL
P
RIVATE
N
ETWORKS
■
The remote office OfficeConnect NETBuilder bridge/router sends data
to the IP address of the central site.
■
The data is encrypted using IPsec.
■
A PPTP/L2TP tunnel is created between the remote site and the central
site, and the data is forwarded through the firewall of the central site.
■
The data is decrypted by the central site.
On the Remote Office
OfficeConnect
Bridge/Router
On the OfficeConnect NETBuilder bridge/router, follow these steps:
1 Configure dial-up to the ISP (see the Configuring Port Bandwidth
Management chapter in
Using Enterprise OS Software ) or virtual leased
line configuration (see the Configuring L2Tunnel Connections chapter in
Using Enterprise OS Software ).
The ISP assigns an IP address to the client, or you configure an IP address
that is applicable to the ISP’s network using the IP service (see the
Configuring IP Routing and Configuring Network Address Translation
chapter in
Using Enterprise OS Software ).
2 Create a virtual port specifying the SysCallerID (SCID) of the central site
PathBuilder switch (see the Configuring Port Bandwidth Management
chapter in
Using Enterprise OS Software ).
3 Add a dial number list to the virtual port specifying the IP Address of the
central site and the type PPTP (see the Configuring Port Bandwidth
Management chapter in
Using Enterprise OS Software ).
4 Configure the L2Tunnel Service (see the Configuring L2Tunnel
Connections chapter in
Using Enterprise OS Software ) to enable the
bridge/router as a tunnel initiator.
5 Configure IPSec on the virtual port specifying the same profile contents
and key at the central site (see the Configuring IPSec chapter in
Using
Enterprise OS Software ).
After the remote site dials the ISP, any data that is sent to the IP address
of the central site creates a PPTP tunnel between the two sites.