Eicon Networks S92 Instrukcja Użytkownika Pobierz pdf (Strona 120)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 120

VPNModel:

A routertorouterVPNmodelisnotdeployedprimarilybecausethevolumeofuse

betweenthepartneringorganizationsdoesnotjustifyarouterroutersetup. Instead,a

RemoteAccessbasedVPNsolutionisdeployedtoprovidemaximum flexibilityand

costeffectiveness.

TheparagraphbelowisextractedfromMicrosoft’sRemoteAccessVPNConnections

documenttoillustratethisparticulartypeof VPNscenario:

“FordialupVPNclientswhoconnecttotheInternetbeforecreatingaVPN

connectionwithaVPNserverontheInternet,twoIP addressesareallocated:

n WhencreatingthePPPconnection,IPCPnegotiationwiththeISPNASassignsa

publicIPaddress.

n WhencreatingtheVPNconnection,IPCPnegotiationwiththe VPNserver

assignsanintranetI Paddress.TheIPaddressallocated bytheVPNservercan

beapublicIPaddressorprivateIPaddress,dependingonwhetheryour

organizationisimplementingpublicorprivateaddressingonitsintranet.

Ineithercase,theIPaddressallocatedtotheVPNclientmustbereachablebyhosts

ontheintranet andviceversa.TheVPNservermusthaveappropriateentriesinits

routingtabletoreachallthehostsontheintranetandtheroutersoftheintranetmust

havetheappropriateentriesintheirroutingtablestoreachtheVPNclients.

ThetunneleddatasentthroughtheVPNisaddressedfromtheVPNclient'sVPN

serverallocatedaddresstoanintranetaddress.TheouterIPheaderisaddressed

betweentheISPallocatedIP addressoftheVPNclientandthepublicaddressofthe

VPNserver. BecausetheroutersontheInternetonlyprocesstheouterIPheader,the

InternetroutersforwardthetunneleddatatotheVPNserver'spublicIPaddress.”

24

http://www.microsoft.com/windows2000/techinfo/reskit/enus/default.asp?url=/WINDOWS2000/techi

nfo/reskit/enus/intwork/inbe_vpn_obwd.asp

1 2 ... 115 116 117 118 119 120 121 122 123 124 125 ... 208 209

Brak uwag

Eicon Networks S92 Instrukcja Użytkownika Strona 120