Bay Networks Bay Dial VPN, Руководство по настройке и устранению неисправностей

Страница: 107 / 186

115623B Rev. 00 BayStream Multiservice Software Version 7.2 9-1
Chapter 9
Requirements Outside the Dial VPN Network
Although the responsibility for configuring network elements outside the Dial
VPN service provider network rests with others, you still need to communicate
the Dial VPN system requirements to them. These requirements include:
• Ensuring that the remote node (PC or dial-in router) is configured to use PPP
and to allow Annex to assign IP and IPX network and node addresses to it.
• Making sure that the remote RADIUS server is configured with the
information necessary to authenticate the users who want to dial in to the
network on which it resides. BaySecure Access Control (BSAC) is the remote
RADIUS server software that supports Dial VPN. The RADIUS server and
the RADIUS client on the gateway must share the same primary secret.
• Configuring the CPE router at the home (destination) network for frame relay,
and -- for Bay Networks routers -- an adjacent host and appropriate DLCIs.
For any CPE router, there must also exist a static route from the CPE router to
the RADIUS client on the gateway, and a static route to the remote node’s
“supernet,” the network to which the remote node’s user community connects.
Fulfilling this requirement ensures that responses from the corporate network
or third-party service provider to the remote node are correctly routed.
Because of router requirements, this step is required for Bay Networks
routers. Routers from other manufacturers may have other requirements. The
following sections provide more information about configuring the static
route and adjacent host information.