With PPTP, data encryption begins after PPP authentication and connection process is completed. PPTP connections use Microsoft Point-to-Point Encryption (MPPE), which uses the Rivest-Shamir-Aldeman (RSA) RC-4 encryption algorithm. PPTP connections require user-level authentication through a PPP-based authentication protocol (MSCHAPv2 is the currently-supported method).

In the WebUI

1.Navigate to the Configuration > Advanced Services > VPN Services > PPTPpage.

2.To enable PPTP, select Enable PPTP.

3.Select either MSCHAP or MSCHAPv2 as the authentication protocol.

4.Configure IP addresses of the primary and secondary DNS servers.

5.Configure the primary and secondary WINS Server IP addresses that are pushed to the VPN Dialer.

6.Configure the VPN Address Pool.

a.Click Add. The Add Address Pool window displays.

b.Specify the pool name, start address, and end address.

c.Click Done on completion to apply the configuration.

7.Click Applyto apply the changes made before navigating to other pages.

In the CLI

(host)(config) #vpdn group pptp enable

client configuration {dnswins} <ipaddr1> [<ipaddr2>] ppp authentication {mschapv2}

(host)(config) #pptp ip local pool <pool> <start-ipaddr> <end-ipaddr>

Working with Site-to-Site VPNs

Site-to-site VPN allows sites at different physical locations to securely communicate with each other over a Layer-3 network such as the Internet. You can use Dell controllers instead of VPN concentrators to connect the sites. Or, you can use a VPN concentrator at one site and a controller at the other site.

The Dell controller supports the following IKE SA authentication methods for site-to-site VPNs:

Preshared key: Note that the same IKE shared secret must be configured on both the local and remote sites.

Suite-B cryptographic algorithms

Digital certificates: You can configure a RSA or ECDSA server certificate and a CA certificate for each site-to- site VPN IPsec map configuration. If you are using certificate-based authentication, the peer must be identified by its certificate subject-name distinguished name (for deployments using IKEv2) or by the peer’s IP address (for IKEv1). For more information about importing server and CA certificates into the controller, see Management Access on page 625.

NOTE: Certificate-based authentication is only supported for site-to-site VPN between two Dell controllers with static IP addresses.

Working with Third-Party Devices

Dell controllers can use IKEv1 or IKEv2 to establish a site-to-site VPN between another Dell controller or between that controller and third-party device. Note, however, that only Dell controllers and devices running Windows 2008 Server or Strongswan 4.3 support IKEv2 authentication.

288 Virtual Private Networks

Dell PowerConnect W-Series ArubaOS 6.2 User Guide

Page 288
Image 288
Dell 6.2 manual Working with Site-to-Site VPNs, Working with Third-Party Devices

6.2 specifications

Dell 6.2 is an advanced enterprise solution that caters to the needs of businesses seeking robust performance and efficiency. As a part of Dell's commitment to innovation, the 6.2 series combines cutting-edge technologies and features that enhance productivity and deliver reliable computing experiences.

One of the standout features of the Dell 6.2 is its impressive processing power. Equipped with the latest Intel processors, it offers exceptional speed and multitasking capabilities. This allows businesses to run demanding applications effortlessly, making it ideal for data-intensive tasks such as data analysis, software development, and virtualization. The series also supports substantial RAM configurations, enabling users to manage extensive workloads without experiencing slowdowns.

In terms of storage, the Dell 6.2 line includes advanced SSD options that significantly boost data access speeds compared to traditional hard drives. This rapid access to information is vital for businesses that require quick retrieval of large datasets. Furthermore, the devices support RAID configurations, which enhances data redundancy and security, protecting critical business information from loss.

Connectivity is another critical aspect of the Dell 6.2 series. It includes multiple USB ports, HDMI outputs, and high-speed Ethernet options, ensuring that users can easily connect to various peripherals and networks. The integration of Wi-Fi 6 technology enables faster wireless connections, resulting in improved internet speeds and bandwidth efficiency, which is crucial in today’s increasingly connected workplaces.

Dell has also prioritized security in the 6.2 series. It features enhanced biometric authentication and advanced encryption methods, safeguarding sensitive data from unauthorized access. Additionally, the system's BIOS protection and automatic updates provide an added layer of security, ensuring that the device remains safe from emerging threats.

The design of the Dell 6.2 is not only sleek and modern but also built for durability. Its robust chassis is engineered to withstand the rigors of daily use, making it suitable for various business environments. This durability ensures that the investment in Dell 6.2 will last for years while maintaining performance integrity.

In summary, the Dell 6.2 series embodies a blend of speed, storage efficiency, connectivity, and security, making it a top choice for enterprises looking to enhance their computing capabilities. With its modern features and durable design, Dell 6.2 is positioned as a reliable partner in driving business success.