BinTec X4000, Руководство пользователя

Страница: 354 / 498

354 X4000 User’s Guide
Configuration of Security Functions and Firewall
10
10.3 Line Tapping Security
You can use an encryption mechanism to obtain data security for critical PPP
connections over connections with critical security, provided both connection
partners support this mechanism. The following functions are possible:
■
Encryption ( chapter 10.3.1, page 354 )
■
VPN (with extra license) ( chapter 10.3.2, page 357 )
10.3.1 Encryption
X4000 supports encryption of PPP connections to WAN partners.
The
➤➤
MPPE (Microsoft Point to Point
➤➤
Encryption ) version 1 and 2,
DES and Blowfish methods are used. DES and Blowfish are implemented as
BinTec proprietary solutions.
MPPE V2 The MPPE Version 2 encryption protocol, the successor to MPPE, has been
developed by Microsoft and also uses a 40-bit or 56-bit key. These are
generated on authentication.
If a larger key length is set in X4000 than in the dial-in client, the connection is
not set up.
If one connection partner is set to MPPE V1 as encryption protocol, MPPE V2
is also accepted on connection setup if the set key length is the same.
DES and Blowfish If these proprietary encryption algorithms are used, either X4000 can generate
a key automatically or you can define an individual key statically in consultation
with the connection partner.
Configuration is made in:
■
WAN P
ARTNER
➧
E
DIT
The DES and Blowfish encryption algorithms are only supported if a license for
VPN is entered in
X4000 .