Funkwerk VPN Access 5 22101 데이터 시트
제품 코드
22101
Should one device malfunction, the other would automatically take over the entire data traffic.
Secure encryption
The Bintec IPSec implementation offers everything that customers wish for. In addition to numerous
methods of encryption, including the brand-new AES ("Advanced Encryption Standard"), Bintec offers the
VPN Access product line with encryption codes up to 256 bits in length. This means that your enterprise will
be ready to meet the demands of tomorrow today.
methods of encryption, including the brand-new AES ("Advanced Encryption Standard"), Bintec offers the
VPN Access product line with encryption codes up to 256 bits in length. This means that your enterprise will
be ready to meet the demands of tomorrow today.
Certificate support
Of course, our devices are not limited to working with just preshared keys; they function with certificates as
well. This means you can build a public key infrastructure for the greatest possible security and the greatest
flexibility in the daily operation of your VPN. Thus, direct intervention to secure the system – when your staff
changes or a VPN device is stolen – is only required at one central location. This makes your administration
easier, increases security and reliability and reduces the costs at the same time.
(By the way: the Governmental Organisations for Security in Information Technology recommend the use of
certificates.)
well. This means you can build a public key infrastructure for the greatest possible security and the greatest
flexibility in the daily operation of your VPN. Thus, direct intervention to secure the system – when your staff
changes or a VPN device is stolen – is only required at one central location. This makes your administration
easier, increases security and reliability and reduces the costs at the same time.
(By the way: the Governmental Organisations for Security in Information Technology recommend the use of
certificates.)
VPN with dynamic IP addresses
The Bintec IPSec implementation supports the building of VPN tunnels right from the beginning – even with
dynamic IP addresses.As such, the central office with a static IP address can use a free ISDN callback
process to have each branch office build a tunnel. This makes small branch locations permanently available,
even if they are not online all the time.And even if both VPN parties have dynamic IP addresses, there is
nothing to stand in the way of their communication with the Bintec solution. The IP addresses are exchanged
via Dynamic-DNS service providers in the Internet or intranet.
dynamic IP addresses.As such, the central office with a static IP address can use a free ISDN callback
process to have each branch office build a tunnel. This makes small branch locations permanently available,
even if they are not online all the time.And even if both VPN parties have dynamic IP addresses, there is
nothing to stand in the way of their communication with the Bintec solution. The IP addresses are exchanged
via Dynamic-DNS service providers in the Internet or intranet.
Save costs with data compression
To save costs, data compression was used on conventional ISDN lines in the past to increase data
throughput considerably. And of course, the same applies to VPN connections. However, it is not possible to
use such conventional data compression processes as VJHC, STAC or MPPC on IPSec packets. This
would alter the packets so that the communications partner would identify this as a hacker attack and reject
the incoming packets. The remedy to this problem is the IPCOMP process, which all the Bintec VPN Access
products support. IPCOMP does not increase the bandwidth of the connections; depending on the type of
data, it reduces the data quantity by a factor of ten. And even if we assume a factor of only two, this would at
least halve the costs for volume-based transmission rates.
throughput considerably. And of course, the same applies to VPN connections. However, it is not possible to
use such conventional data compression processes as VJHC, STAC or MPPC on IPSec packets. This
would alter the packets so that the communications partner would identify this as a hacker attack and reject
the incoming packets. The remedy to this problem is the IPCOMP process, which all the Bintec VPN Access
products support. IPCOMP does not increase the bandwidth of the connections; depending on the type of
data, it reduces the data quantity by a factor of ten. And even if we assume a factor of only two, this would at
least halve the costs for volume-based transmission rates.
>> Software Features
> TCP/IP routing
Routing information updating and distribution, static or dynamic (RIP v1/v2/triggered, RFC
2091), selectable for each interface, ProxyARP, BOOTP/DHCP forwarding
> OSPF
Static/dynamic updating and distribution of routing information
> Bridging
Spanning Tree & Transparent Mode
> QoS
Quality of Service with DiffServ and shaping: breakdown of IP data traffic into classes with
different priorities, optimized queue handling and shaping as per these priorities
> BRRP
Bintec Router Redundancy Protocol, back up a service offered by a single physical router to
a LAN (Virtual Router)
> IP load balancing
Bandwidth management
> AUX backup
Backup via GSM, GPRS or analogue modem
> PPP
Authentication mechanisms (PAP, CHAP, MS-CHAP, MS-CHAP v2), standard PPP,
dynamic IP address assignment (server and client mode)