Allied Telesis AR440S manual How to configure VPNs in typical corporate networks, Vlan

Models: AR440S

1 53
Download 53 pages 24.96 Kb
Page 6
Image 6

How to configure VPNs in typical corporate networks

This section describes a typical corporate network using secure VPN. The network consists of a headquarters (HQ) router and two branch office routers. The headquarters router is acting as a VPN Access Concentrator, and allows for VPN access from either of the branch office sites or from roaming laptop VPN clients. The network is illustrated in the following figure.

 

 

branch office 1

Telco’s ADSL

 

ISP’s

 

headquarters

 

 

 

 

 

VPN router

 

exchange

 

router

 

VPN access

 

 

 

 

VLAN 1

 

 

 

 

 

 

 

 

 

 

 

 

concentrator

 

 

 

 

222.222.222.1

 

 

 

222.222.222.254

200.200.200.254

192.168.140.254

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

192.168.141.254

 

 

 

 

 

 

 

 

200.200.200.1

 

 

 

 

 

corporate

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

211.211.211.254

 

 

 

 

 

 

 

 

 

 

LAN

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Pool of addresses available

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

for roaming clients:

 

 

 

 

 

branch office 2

 

 

 

 

 

 

211.211.211.1

 

 

192.168.143.1-50

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

dynamically

 

 

 

hotel’s NAT gateway

 

 

 

 

 

 

 

 

 

 

 

 

 

192.168.142.254

 

assigned

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

192.168.200.254

 

 

 

 

 

 

 

 

 

 

 

VLAN 1

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

roaming VPN client

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

physical address: 192.168.200.1

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

VPN tunnel address from pool: 192.168.143.1

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

vpn-corporate.eps

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Branch office 1 uses the PPPoA ADSL link type, and branch office 2 uses the PPPoEoA ADSL link type. We have done this to illustrate these two commonly used ADSL link types. For information about the ADSL link type you need, see your ADSL provider.

This How To Note gives you the commands for configuring each of the following:

1.The headquarters VPN access concentrator router, which includes: z an ethernet connection to the Internet

z a fixed Internet address. This means that the branch offices and the roaming VPN clients have a known target for the headquarters end of the VPN

z VPN access to and from branch office 1. This can be initiated from the headquarters or branch office end. This is a site-to-site VPN and uses IPsec tunnel mode (see "Background: NAT-T and policies" on page 4).

z VPN access from branch office 2. This can only be initiated from the branch office end, because the branch office has a dynamically-assigned IP address. This also uses IPsec tunnel mode.

z VPN client access from roaming users on Windows 2000 and Windows XP. This is provided by using IPsec transport mode with L2TP (see "About IPsec modes: tunnel and transport" on page 3)

z optionally, prioritisation of voice (VoIP) traffic for these VPN clients by using Software Quality of Service (SQoS). If the VPN clients use VoIP to establish voice calls via the headquarters network, this helps maintain voice quality.

Page 6 AlliedWare™ OS How To Note: VPNs for Corporate Networks

Page 6
Image 6
Allied Telesis AR440S manual How to configure VPNs in typical corporate networks, Vlan

AR440S specifications

Allied Telesis offers a range of advanced routers designed to meet the connectivity and operational needs of modern enterprises. Among its extensive lineup, the AR450S, AR441S, AR415S, AR442S, and AR440S models stand out for their robust features and technologies, making them ideal solutions for various networking environments.

The Allied Telesis AR450S is a high-performance router tailored for service providers and large enterprises. It supports advanced routing protocols, including IPv4 and IPv6, ensuring compatibility with both legacy and modern networks. The AR450S boasts substantial throughput capabilities, making it suitable for bandwidth-intensive applications. Its versatile WAN options, including Ethernet and cellular connectivity, allow seamless integration into diverse network architectures.

Next in the lineup is the AR441S, which focuses on providing enhanced security and reliability. With built-in firewall capabilities and VPN support, this model ensures secure communication over the internet. The AR441S also features numerous Ethernet ports for flexible connectivity, enabling organizations to scale their networks as needed. Its user-friendly interface facilitates straightforward configuration and management.

The AR415S is designed for branch offices and small to medium-sized enterprises. This router offers a balance of performance and affordability, equipped with essential features like Quality of Service (QoS) and traffic shaping. The AR415S supports multiple WAN connections, which helps in maintaining reliable internet access by auto-failing to backup connections when necessary.

The AR442S incorporates advanced networking technologies, including dynamic routing protocols and deep packet inspection. This model enhances performance by optimizing traffic flow and improving bandwidth utilization. Its support for VoIP and other multimedia applications makes it an excellent choice for organizations seeking to maximize their communication capabilities.

Lastly, the AR440S is engineered for high availability and redundancy. It includes dual power supplies and hot-swappable components, ensuring that network services remain uninterrupted during maintenance. The AR440S is particularly valuable in mission-critical environments where downtime can lead to significant business disruption.

In summary, the Allied Telesis AR series routers—AR450S, AR441S, AR415S, AR442S, and AR440S—offer a rich set of features tailored to various operational needs. With their advanced routing capabilities, security features, and reliable performance, these routers represent the cutting edge of networking technology for businesses looking to enhance their connectivity and operational efficiency.