22Introducing the VPN Gateway

Private network authentication. Existing authentication servers within the customer’s private network can be used.

Access control. Unique access rules can be specified for each user group in the various VPNs.

Private network name resolution. If desired, private network DNS servers can be mapped to the VPN.

Split administration. VPN Portal management is enabled for each VPN customer through a web interface, without exposing global administration access.

High availability. The Secure Service Partitioning solution is compatible with the NVG cluster’s high availability solutions.

Branch Office Tunnels

The NVG software provides the ability to configure IPsec-based branch office tunnels. Several peer-to-peer branch office tunnels can be configured for each virtual private network (VPN).

The following number of branch office tunnels can be configured per hardware model:

NVG 3070: 2500

NVG 3050: 1000

Nortel 2424-SSL Application Switch: 500

For example, a cluster of two NVG 3070s support 5000 branch office tunnels.

Portal Guard

Feature used to "convert" an existing HTTP site to generate HTTPS links, secure cookies and so on. The VPN Gateway will not only handle the SSL processing but also see to it that all existing web links are rewritten to HTTPS. This eliminates the need to rewrite each link manually. Requires a license.

SSL Acceleration

The NVG software also includes features for SSL acceleration. Note that these features in some cases require interoperation with a Nortel Application Switch.

Supports accelerated SSL processing by offloading SSL encryption and decryption from backend servers.

Supports load balancing of encrypted and unencrypted traffic for up to 256 backend servers, with health checking and persistent client connections.

Nortel VPN Gateway

User Guide

NN46120-104 02.01 Standard

14 April 2008

Copyright © 2007-2008 Nortel Networks

Page 22
Image 22
Nortel Networks NN46120-104 manual Branch Office Tunnels, Portal Guard, SSL Acceleration

NN46120-104 specifications

Nortel Networks NN46120-104 is a versatile and efficient telecommunications hardware platform designed to meet the demands of modern networking environments. As a part of Nortel’s extensive portfolio, this device showcases the company’s commitment to innovation and reliability in the telecom sector.

One of the main features of the NN46120-104 is its robust performance capabilities. This platform is capable of handling high traffic volumes, making it suitable for medium to large enterprises. With its advanced routing capabilities and support for various protocols, the device ensures seamless communication across multiple network segments, providing efficient data transfer and connectivity.

The NN46120-104 is built upon the foundation of Nortel's renowned Layer 3 switching technology. This allows it to intelligently direct data packets based on their IP addresses, optimizing both speed and reliability. The inclusion of Virtual LAN (VLAN) support enhances network segmentation, improving security and management while reducing broadcast domains.

In terms of interface options, the NN46120-104 supports an array of Ethernet configurations, including Gigabit and Fast Ethernet ports. This flexibility allows organizations to tailor their networking solutions to their specific needs while enabling easy upgrades as technology evolves. The device also supports Power over Ethernet (PoE), facilitating the deployment of powered devices like IP phones and wireless access points without the need for additional power sources.

Another significant characteristic of the NN46120-104 is its robustness in terms of security features. With support for advanced security protocols and features such as Access Control Lists (ACLs), the device helps safeguard sensitive data by controlling traffic flow and restricting unauthorized access.

Additionally, the NN46120-104 is designed for ease of management. It offers an intuitive interface and supports various management protocols, including Simple Network Management Protocol (SNMP), enabling administrators to monitor and configure the device efficiently.

In summary, the Nortel Networks NN46120-104 combines high performance, extensive connectivity options, advanced security features, and ease of management, making it a formidable choice for enterprises looking to enhance their network infrastructure. Its capabilities align well with the rigorous demands of today’s digital communication landscape, ensuring reliability and efficiency in organizational operations.