CC Infrastructure
VPN Gateway
Connection
Agent
Service X
VPN Agent
Service Y
Application
X
Application
Application
Y
Service
Tunnel
OXO Connect
VPN connection
request
2
Application
data
4
connection
service
IAD : Firewall / NAT
Remote Service Center
1
3 OXO VPN IP @
CC permanent connection
Internet / WAN
Figure 3.1: CCO VPN service architecture
When CCO is enabled, OXO Connect establishes and maintains a permanent connection to CCO
infrastructure (blue arrow).
To establish a VPN with OXO Connect:
• The application sends a VPN connection request to OXO Connect via the Connection service (1)
• OXO Connect establishes an outband VPN connection with the VPN gateway (2), and returns its
VPN IP address to the application (3)
• The application connects to the VPN gateway and can exchange data with OXO Connect (4)
Some carriers manage their own CCI to access their OXO Connects. The connection from ALE CCI is
still possible, but is controlled by the Service Activation in the carrier CCI. When a VPN connection
request is sent from the ALE service center to an OXO Connect managed by a carrier, the request is
Chapter
3
System Services
3EH21123USAA - Ed. 01 - April 2017 - Installation Manual 38/207