H3C SecPath F1000-AI-5 Series User Manual

38
Remote office through IPsec
IP Security (IPsec) is defined by the IETF to provide interoperable, high-quality, cryptography-based
security for IP communications. It is a Layer 3 VPN technology that transmits data in a secure
channel established between two endpoints (such as two security gateways). Such a secure
channel is usually called an IPsec tunnel. You can use IPsec for secure access to remote offices.
Figure 7 Network diagram for IPsec
For more information, see the configuration guide for the product.
Remote office through SSL VPN
SSL VPN provides SSL-based secure remote access services through an SSL VPN gateway. Users
from anywhere on the Internet can establish a secure connection to an SSL VPN gateway through
an SSL-enabled browser to access protected resources behind the gateway.
Figure 8 Network diagram for SSL VPN
For more information, see the configuration guide for the product.
Hot backup
Hot backup is a device-level high availability (HA) solution. It enables two devices to back up each
other dynamically to ensure user service continuity upon failure of one of the devices. Hot backup is
implemented through H3C proprietary Remote Backup Management (RBM).
Untrust
Internet
GE1/0/12
192.100.0.1/24
Device A
GE1/0/13
220.0.0.100/24
GE
2/
0/
13
200.
0.
10
.100
/
24
GE
2/
0
/12
192.
200
.0
.1/24
Device B
192.
100
.0
.2
/
24
Host A
Trust
Host B
Trust
192.
200
.0
.2
/
24
GE1/0/1
1.1
.1.
2/24
GE1/0/3
2.2.2.2/24
GE1/0/2
3.3.3.3/24
40.1.1.1/24 20.2.2.2/24
30.3.3.3/
24
Host Device
Server A
Server B
Internet Intranet
Intranet
TrustUntrust

H3C SecPath F1000-AI-5 Series Specifications

General

Brand	H3C
Model	SecPath F1000-AI-5 Series
Category	Firewall
Language	English