Voice over Wireless LAN Solution Guide v1.0 December 2005
______________________________________________________________________________________________________
Page 23
downstream and upstream traffic is tunneled to and from the WSS 2300 that serves the assigned
remote subnet.
2.2.2.7 WLAN Handset 2212 VPN design
The WLAN Handset 2212 has a VPN feature that enables an IPsec tunnel to a Nortel VPN
Router, which is the only IPsec platform supported today. This alters some of the usual design
recommendations for the telephony components, such as the WTM 2245. Usually, the WTM 2245
is placed in the same subnet with the handsets. With the VPN feature enabled, the WTM 2245
now resides behind the VPN Router in a different subnet from the handsets; however, even
though the same-subnet restriction has been lifted, it is still very important to locate the WTM
2245 as close to the handsets as possible. In this case, it is placed immediately behind the VPN
Router (and in the same subnet as the VPN Router). The VPN Router must also be placed as
close to the handsets as possible. Figures 8 and 9 depict a couple of possible VPN designs.
Figure 8: VPN design over L2 networks