ZyXEL Communications VANTAGE CNM 2.0 -, Руководство пользователя

Страница: 145 / 346

Vantage CNM 2.0 User’s Guide
Chapter 11 Configuration > VPN 148
C
H A P T E R
11
Configuration > VPN
This chapter shows you how to configure VPNs using Vantage.
11.1 VPN Overview
A VPN (Virtual Private Network) provides secure communications between sites without the
expense of leased site-to-site lines. A secure VPN is a combination of tunneling, encryption,
authentication, access control and auditing technologies/services used to transport traffic over
the Internet or any insecure network that uses the TCP/IP protocol suite for communication.
11.1.1 IPSec
Internet Protocol Security (IPSec) is a standards-based VPN that offers flexible solutions for
secure data communications across a public network like the Internet. IPSec is built around a
number of standardized cryptographic techniques to provide confidentiality, data integrity and
authentication at the IP layer.
11.1.2 Security Association
A Security Association (SA) is a contract between two parties indicating what security
parameters, such as keys and algorithms they will use.
11.1.3 Encryption
Encryption is a mathematical operation that transforms data from "plaintext" (readable) to
"ciphertext" (scrambled text) using a "key". The key and clear text are processed by the
encryption operation, which leads to the data scrambling that makes encryption secure.
Decryption is the opposite of encryption: it is a mathematical operation that transforms
ciphertext to plaintext. Decryption also requires a key.
11.1.4 Data Confidentiality
The IPSec sender can encrypt packets before transmitting them across a network.
11.1.5 Data Integrity
The IPSec receiver can validate packets sent by the IPSec sender to ensure that the data has not
been altered during transmission.