Nortel 4134 用户指南
44
IPsec VPN fundamentals
•
Remote access VPN
Site-to-Site VPN
In its basic configuration, site-to-site VPN connects two remote offices or a
branch office to headquarters. In this case, each site is connected to the
Internet through a secure router. The objective of the site-to-site VPN is to
create a secure tunnel between the two secure routers through the Internet.
All the network traffic from each site to the Internet traverses the local
secure router. Each secure router monitors the network traffic and, based
on the defined policy, secures the packets destined to the other secure site.
branch office to headquarters. In this case, each site is connected to the
Internet through a secure router. The objective of the site-to-site VPN is to
create a secure tunnel between the two secure routers through the Internet.
All the network traffic from each site to the Internet traverses the local
secure router. Each secure router monitors the network traffic and, based
on the defined policy, secures the packets destined to the other secure site.
Traffic headed to any other locations on the Internet is left unprotected.
In this way, the VPN transparently secures the traffic generated by the
networks behind it.
In this way, the VPN transparently secures the traffic generated by the
networks behind it.
Site to site VPNs on the SR4134 support any of the following topologies
•
One to One: provides one-to-one connectivity between two different
sites.
sites.
Figure 6
One to one
One to one
•
One to Many: connects one site to several other sites. A typical
application is to connect a headquarters with several branch offices. The
headquarters acts as hub and the connections from headquarters to
branch offices act as the spokes. In this case, communication between
two spokes is carried through the hub.
application is to connect a headquarters with several branch offices. The
headquarters acts as hub and the connections from headquarters to
branch offices act as the spokes. In this case, communication between
two spokes is carried through the hub.
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600
01.02
Standard
10.0
3 August 2007
Copyright © 2007, Nortel Networks
.