Patton OnSite 3210 Series, Руководство пользователя

Страница: 20 / 110

Applications overview 20
OnSite Model 3210 User Manual 1 • General information
Applications overview
Patton’s OnSite managed VPN routers deliver the features you need for secure, optimized communication
over non-secured IP networks. Combining VPN tunneling, standard IPSec encryption, and firewall capabili-
ties with Patton’s powerful
quality of service technology, OnSite VPN routers deliver private, prioritized net-
working for business, government, and military applications.
Banking, insurance, retail, utilities, railroads, or government, any organization with more than one site can
benefit from the security and traffic-shaping advantages of the OnSite family of VPN routers. As traffic
traverses unsecured networks, VPN tunneling with standard IPSec encryption plus firewall capabilities preserve
data security and integrity. Meanwhile, OnSite’s ToS/Qos traffic-shaping and prioritization prevent critical
information getting blocked or impeded by less important traffic while enhancing the quality of real-time
applications such as voice and video.
OnSite 3210 Series models provide dual 10/100Base-T Ethernet ports with a G.SHDSL port. The two Ether-
net ports provide full-featured IP routing plus Ethernet and IP-layer QoS services. The G.SHDSL port pro-
vides WAN access by means of a leased-line connection to the network. The following sections show some
typical applications for the OnSite 3210 Series.
This chapter describes typical applications for which the OnSite 3210 Series series is uniquely suited.
Branch-Office virtual private network over Frame Relay service
Featuring VPN tunneling combined with built-in frame-relay support and a selection of standard serial inter-
faces on-board, the OnSite 3210 Series offers the remote-branch office a secure, private and prioritized net-
work connection to another location over virtually any available network service and any standard WAN
interface.
Figure 5. Branch-office virtual private network over a Frame-Relay service network
Figure 5 shows a branch-to-branch VPN connection through a frame-relay service network as delivered on
serial lines. The OnSite 3210 Series can support a similar scenario with network service delivered via an Ether-
net WAN interface. For remote sites where PPP service is available, the 3210 Series also supports PPP network
access over all the standard WAN interface options mentioned above.
In this specific application, all traffic between the branch and corporate offices is carried in an IPSec tunnel. All
of the IPSec VPN traffic is encapsulated in Frame Relay for transport over the Frame Relay service network.
The serial port is configured for Frame Relay.