Technicolor TG672, Руководство по установке и эксплуатации

Страница: 132 / 152

124
11 INTERNET SECURITY
E-DOC-CTC-20100728-0008 v2.0
11.1 IPSec and VPN
What Is a VPN?
A VPN or Virtual Private Network is a private communications network set up over a publicly accessible network. A VPN
creates a kind of tunnel through which information is transported between a computer and the network to which it is
connected.
What Is IPSec?
IPSec or IP Sec urity is a way of securing communication over IP. IPSec is used to create a VPN. It allows you to connect your
local computer to the remote network in a safe way as it provides:

Reliable user authentication.

Reliable tunnel encryption able to cope with existing network and firewall settings.
IPSec and VPN on your Technicolor Gateway
Your Technicolor Gateway has integrate has an integrated IPSec/VPN client and server allowing you to setup the following
scenarios configure the most common VPN scenarios, for example:

LAN-to-LAN connection

VPN Client configuration

VPN Server configuration
LAN-to-LAN
The Technicolor Gateway allows you to connect LAN networks that are located on different sites via a secure VPN tunnel
over the public Internet. At each peer the Technicolor Gateway acts as an IPSec security gateway.
VPN Client
The VPN client in the Technicolor Gateway can replace a software VPN client installed on a computer. You can use it for
example to connect from your home to the corporate network for teleworking.
Using the VPN client in the Technicolor Gateway has several advantages over the use of VPN client software installed on
the computer of the end user:

The administrator of the corporate network does not have to worry about upgrades of the operating system on the
teleworker’s computer.

Since the VPN client is fully integrated in the Technicolor Gateway, it can not be tampered with, and is probably more
secure than software residing on a computer.

Adverse interactions with computer software, such as firewalls, PPPoE clients, wireless drivers, viruses and worms are
avoided. This guarantees a better stability and fewer functionality problems.
VPN Server
The Technicolor Gateway can establish a secure connection with any remote gateway that meets the VPN settings,
regardless its location in the public network. The use of the Extended Authentication protocol can optionally be configured.
In this case, a list of authorized users is composed and stored on the Technicolor Gateway.
More information
In-depth information about the different scenarios and configuration can be found in the Technicolor Gateway IPSec
documentation available at www.technicolor.com.