Chapter 8

VPN Configuration

8.1Overview

Virtual Private Networks are an efficient and cost-saving way to use the internet as a transport alternative to dedicated lines or dial-up RAS overcoming the security risks of internet communications.

There are two well-established technologies for data encryption: IPSec and SSL (Secure Socket Layer).

Most VPN implementations rely solely on IPSec, which has several disadvantages in modern network topologies. Barracuda NG VPN has incorporated both technology standards and hence improves the VPN connectivity substantially.

Fig. 8–1Structure of a VPN tunnel

NG

NG

 

VPN client

Firewall

HQ LAN

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Destination

VPN client

Client IP

Server Tunnel

IP Address

Address

IP Address

IP Address

=

 

=

=

 

=

 

Source

Peer

VPN Server

 

DST

Barracuda Networks provides two types of VPN client licenses:

Barracuda NG VPN Client

Barracuda NG SSL VPN and NAC

For detailed information concerning the different features of the two licenses, have a look at 8.2 Facts and Figures, page 83.

8.2Facts and Figures

VPN Licensing

The Barracuda NG VPN Client license is included with every appliance. On box appliances, it allows for unlimited users, while on virtual appliances it is limited to the virtual appliance’s capacity.

83 VPN Configuration

Page 85
Image 85
Barracuda Networks VERSION SP4 manual VPN Configuration, Overview, Facts and Figures