Appendix C

About VPNs

Overview

C

A VPN (Virtual Private Network) provides a secure connection between 2 points, over an insecure network - typically the Internet. This secure connection is called a VPN Tunnel.

There are many standards and protocols for VPNs. The standard implemented in the Wireless ADSL2/2+ Modem Router is IPSec.

IPSec

IPSec is a near-ubiquitous VPN security standard, designed for use with TCP/IP networks. It works at the packet level, and authenticates and encrypts all packets traveling over the VPN Tunnel. Thus, it does not matter what applications are used on your PC. Any application can use the VPN like any other network connection.

IPsec VPNs exchange information through logical connections called SAs (Security Associations). An SA is simply a definition of the protocols, algorithms and keys used between the two VPN devices (endpoints).

Each IPsec VPN has two SAs - one in each direction. If IKE (Internet Key Exchange) is used to generate and exchange keys, there are also SA's for the IKE connection as well as the IPsec connection.

There are two security modes possible with IPSec:

•Transport Mode - the payload (data) part of the packet is encapsulated through encryption but the IP header remains in the clear (unchanged).

The Wireless ADSL2/2+ Modem Router does NOT support Transport Mode.

•Tunnel Mode - everything is encapsulated, including the original IP header, and a new IP header is generated. Only the new header in the clear (i.e. not protected). This system provides enhanced security.

The Wireless ADSL2/2+ Modem Router always uses Tunnel Mode.

IKE

IKE (Internet Key Exchange) is an optional, but widely used, component of IPsec. IKE provides a method of negotiating and generating the keys and IDs required by IPSec. If using IKE, only a single key is required to be provided during configuration. Also, IKE supports using Certificates (provided by CAs - Certification Authorities) to au- thenticate the identify of the remote user or gateway.

If IKE is NOT used, then all keys and IDs (SPIs) must be entered manually, and Certificates can NOT be used. This is called a "Manual Key Exchange".

When using IKE, there are 2 phases to creating the VPN tunnel:

•Phase I is the negotiation and establishment up of the IKE connection.

•Phase II is the negotiation and establishment up of the IPsec connection.

Page 120 Page 122
Page 121
Image 121
LevelOne WBR-3460 user manual About VPNs, IPSec, Wireless ADSL2/2+ Modem Router always uses Tunnel Mode
Page 120 Page 122

WBR-3460 specifications

The LevelOne WBR-3460 is a versatile wireless router known for its robust performance and user-friendly features. Tailored for both home and small office environments, this device offers a blend of reliability and advanced wireless capabilities, making it an appealing choice for users who demand high-speed internet connectivity.

One of the standout features of the WBR-3460 is its support for dual-band wireless communication, operating across both the 2.4GHz and 5GHz frequency bands. This dual-band capability allows users to manage their networks more efficiently, as it provides the flexibility to connect various devices without interference. The 2.4GHz band is ideal for everyday tasks such as browsing and streaming, while the 5GHz band excels at handling bandwidth-intensive activities like online gaming and high-definition video streaming.

The WBR-3460 is equipped with IEEE 802.11n technology, which ensures enhanced wireless performance and range. This standard delivers data rates of up to 300Mbps, significantly improving the network's efficiency compared to earlier wireless standards. Additionally, the router employs MIMO (Multiple Input Multiple Output) technology, which utilizes multiple antennas to transmit and receive data, resulting in improved signal strength and reduced dead zones within the coverage area.

Security is another critical aspect of the LevelOne WBR-3460. It includes essential security features such as WPA/WPA2 encryption, ensuring that user data remains protected from unauthorized access. The router also supports MAC address filtering and VPN pass-through capabilities, providing further layers of security for its users.

For ease of use, the WBR-3460 offers a straightforward installation process, enabling users to set up their network quickly without the need for advanced technical knowledge. The intuitive web interface simplifies the management of network settings, making it easy for users to customize their network configurations to meet their specific needs.

In conclusion, the LevelOne WBR-3460 is a powerful, feature-rich wireless router suitable for various environments. With dual-band capabilities, robust security features, and ease of management, it remains an excellent choice for users looking to enhance their wireless networking experience. Whether for casual web browsing or demanding online gaming, this router is designed to deliver reliable performance and user satisfaction.
Top Page Image Contents