![](/images/new-backgrounds/1190993/19099349x1.webp)
OnSite 2800 Series User Manual | 1 • General information |
|
|
In figure 7, the blue pipes represent VPN connections for private traffic within the corporate intranet, while the green pipes represent the Internet traffic. The red pipe is a Frame Relay PVC transporting Internet traffic and private corporate traffic over the VPN. Each of the three remote sites is connected with headquarters via an OnSite VPN router. Each remote site can take advantage of the most convenient and locally available interface the WAN service can offer, whether X.21, or V.35.
The corporate
•Private corporate traffic (the intranet/extranet)
•Internet traffic
The service provider offers a Frame Relay network for access, so both the private corporate traffic and the Inter- net traffic is transported over a Frame Relay PVC with one DLCI. The corporate traffic is transported within IPSec VPN that is in the Frame Relay PVC. The separation of corporation and Internet traffic is managed by using an ACL using IP addresses as the watershed.
To configure this application, you must configure the following features:
•A serial Frame Relay link as the WAN service which will carry both private corporate traffic and public Internet traffic
•An IPSec VPN for private corporate traffic
•An ACL to distinguish between the two types of traffic so only the private corporate traffic is carried over the VPN.
See chapter 4 on page 44 to configure the serial port, chapter 6 on page 67 to configure the VPN, and chapter 7 on page 79 to configure the ACL. Chapter 8 on page 93 provides more
Applications overview | 25 |