NEC Univerge SV9100, Руководство пользователя

Страница: 214 / 766

Issue 2.0
SV9100 Networking Manual 5-19
VPN
Another common feature is the use of the Internet as the WAN between
customer locations. When this is done VPNs are typically used between the
locations. A VPN (Virtual Private Network) is a private data network that
maintains privacy through the use of tunneling protocols and security
features over the public Internet. This allows for remote networks (with
private addresses), residing behind NAT routers and/or firewalls, to
communicate freely with each other. When building the VPN tunnels,
throughout the network, they must be assigned as a fully meshed network.
This means that every network is allowed direct connection to each and
every other network in the topology.
The following diagram shows three sites connected together via VPN. This
network is not fully meshed due to the lack of a VPN tunnel between Sites B
and C.
Site A can communicate with phones on sites B and C. Phones on sites B
and C can not communicate with each other.
To correct this issue, another VPN connection between sites B and C is
required.
Figure 5-10 VPN Network
VPN Tunnel
Between Sites A and C
IPLE Signaling Address = 192.168.15.5/24
IPLE DSP = 192.168.15.6/24
IPLE Signaling Address = 192.168.20.5/24
IPLE DSP = 192.168.20.6/24
IPLE Signaling Address = 192.168.15.5/24
IPLE DSP = 192.168.15.6/24
Internet
SITE A
SITE C
SITE B
IPLE 32
IPLE 32
IPLE 32
VPN Tunnel
Between Sites A and B