VPN E-SERVER : INTERNET APPLICATIONS
Ed. 042/10 Réf. 3EH 21000 BSAA
data encryption method are all negotiated with the VPN server.
- Authentication
The protocol proposed by OmniPCX is MS-CHAP (Microsoft Challenge Handshake Authentication
Protocol) version 2. Unless the client can provide this type of authentication, connection will be re-
fused.
- Client IP address
The IPCP (Internet Protocol Control Protocol) negotiation process with the VPN server allocates an
intranet IP address to the client. This address is configured beforehand in OmniPCX (see "Configu-
ration for OmniPCX”).
- Data encryption
The data encryption method used by OmniPCX is MPPE (Microsoft Point to Point Encryption) with
continuous RSA RC4 encoding and 40-bit or 128-bit encryption keys. Connection attempts will be
rejected if the client cannot use these methods.
- Data tunneling
After data encryption, a PPP header is added to create the PPP frame, which is then encapsulated
with a modified GRE header (Generic Routing Encapsulation, RFC 1701 and 1702). The resulting
frame is itself encapsulated with an IP header.
The diagram below illustrates a frame that has been tunneled by the VPN client:
The number of simultaneous connections depends on bandwidth. Alcatel OmniPCX carries out no
checks on this, but the maximum number of remote connections for a 128-Kbps link should not exceed
5, otherwise the quality of service will be degraded.
Configuration for OmniPCX
The Client-to-LAN VPN is installed using the Getting Started -> VPN Wizard menu.
IP GRE PPP
Encrypted data
IP
TCP
UDP
Application data
ource =
ixed or I
P-allocated public IP address
Desti = public IP address of the PPTP server
Source = intranet IP address allocated by the PPTP server
Desti = intranet IP address
To Next Page
Loading...
Need help?
General