Kentrox RMX-3200, Руководство по настройке

Страница: 90 / 388

Remote RMX-3200 Version 5.2x Configuration Guide
Configuring a Site VPN Connection: Getting Started
8-2
Getting Started
A major feature of the Remote RMX-3200 is the ability to provide secure remote
access to site network elements.
A site VPN connection can be temporarily established between a client and the
Remote RMX-3200. The Remote RMX-3200 uses the OpenVPN software package to
establish the VPN connection. A VPN connection from the client to the site allows IP
connectivity without the problems of using port based NAT.
A firewall is implemented on the Remote RMX-3200 to restrict the traffic to approved
IP addresses and ports at the site.
Configuration Requirements
The Remote RMX-3200 uses an OpenVPN controller instance configured in the
site-server
mode to establish the site VPN connection from the client. An
OpenVPN controller instance in the
site-server
mode can be used in addition to an
OpenVPN controller instance in the
client
mode for secure wireless backhaul.
Optima
Optima is a web-based software application that provides complete visibility and
control of network infrastructure sites, such as cell sites, substations and remote
communication huts and all its systems including power, environmental, security and
networking.
Optima provides a Remote RMX-3200 connectivity page that displays detailed
information (protocol, port and cipher) about the site VPN. Redirect uses the site VPN
information passed by Optima to establish the site VPN connection before launching
applications to the site network elements.
Redirect
The Redirect software manages the site VPN connection to the Remote RMX-3200
that enables access to the network elements on the site's private LAN. Redirect
bundles OpenVPN client and supporting Kentrox data (e.g. server authentication
certificates) to perform the site VPN connection.
Redirect supports one VPN connection at a time. To establish a new VPN connection
to a different site, Redirect automatically disconnects the previous connection and
establishes the new connection.