BinTec X3200, Руководство пользователя

Страница: 305 / 419

X3200 User’s Guide 305
Line Tapping Security
7
7.3 Line Tapping Security
You can use an encryption mechanism to obtain data security for critical PPP
connections, provided both connection partners support this mechanism. The
following functions are possible:
■
Encryption ( chapter 7.3.1, page 305 )
■
VPN (with extra license, chapter 7.3.2, page 308 )
7.3.1 Encryption
X3200 supports encryption of PPP connections to WAN partners. The
➤➤
MPPE (Microsoft Point to Point
➤➤
Encryption ) version 1 and 2, DES
and Blowfish methods are used. DES and Blowfish are implemented as BinTec
proprietary solutions and are only available with a VPN license.
MPPE V2 The MPPE version 2 encryption protocol, the successor to MPPE, has been de-
veloped by Microsoft and like version 1 also uses a 40-bit, 56-bit or 128-bit key.
If a larger key length is set in X3200 than in the dial-in client, the connection is
not set up.
If one connection partner is set to MPPE V1 as encryption protocol, MPPE V2
is also accepted on connection setup if the set key length is the same.
DES and Blowfish If these proprietary encryption algorithms are used, either X3200 can generate
a key automatically or you can define an individual key statically in consultation
with the connection partner.
Configuration is made in:
■
WAN P
ARTNER
➧
E
DIT
The DES and Blowfish encryption algorithms are only supported if a license for
VPN is entered in
X3200 .