Siemens HiPath 3000 Series - Virtual Private Network (VPN)

To Next Page

To Previous Page

HiPath 3000/5000 in the LAN Network Nur für den internen Gebrauch

A31003-H3590-S100-7-7620, 06/2012

13-34 HiPath 3000/5000 V9, Service documentation

h3h5_in_the_lan.fm

HG 1500 Board

13.6.9 Virtual Private Network (VPN)

Virtual Private Networks (VPN) connect individual computers and local networks via the Inter-

net to form a closed virtual network. Communication in a VPN is tunneled through the Internet

(encapsulated) and is protected from tapping and access by third parties such as Internet users

and providers that are not a part of the VPN. A VPN enables an intranet to be extended beyond

the LAN, for example to home workstations

or branch offices, without requiring a dedicated line.

Figure 13-4 VPN - Sample Configuration

HiPath 3000

with HG 1500

HiPath 3000

with HG 1500

Teleworker A

VPN tunnel

Switch

LAN B

LAN C

Main Page

Default Chapter3
- Table of Contents3
1 Introduction and Important Notes21
- Hipath 3000/5000 V9, Service Documentation21
- About this Documentation22
- Safety Information and Warnings27
- Emergencies34
- Reporting Accidents34
- Correct Disposal and Recycling35
- Hipath 3000/5000 V9 , Service Documentation35
- Standards and Guidelines for Installation36
- Privacy and Data Security39
- Further Information40
2 System Data41
- Hipath 300043
- Hipath 500081
- System-Specific Capacity Limits for Hipath 3000, Hipath 500083
- Static Configuration Rules85
- Dynamic Configuration Rules93
- Technical Specifications for Hipath 3000120
- Interface-To-Interface Ranges121
- Country-Specific Ring Frequencies for Analog Subscriber Line Modules122
- Numbering Plan124
- Technical Specifications and Compliance to Hipath 3000126
- Environmental Conditions132
  - Electrical Operating Conditions132
  - Mechanical Operating Conditions132
3 Boards for Hipath 3000133
- Functional and Model Overview of the Boards135
- Central Board149
  - Cbcc149
  - Cbrc158
  - Cbsap167
  - Cma172
  - Cms173
  - CUC and CUCR176
  - CUP and CUPR178
  - Dbsap180
  - Imodn182
  - Lim183
  - Lims185
  - Luna2187
  - MMC194
  - Psup195
  - RGMOD (for Selected Countries Only)196
  - Upsc-D200
  - Upsc-Dr206
- Peripheral Boards212
  - DIU2U (for U.S. Only)213
- Diun2216
- Diut2220
- Hxgs3, Hxgr3227
- Ivmnl, Ivmn8233
- Ivmp4, Ivmp4R237
- IVMP8 (Not for U.S.) and IVMP8R (Not for U.S.)241
- Ivms8, Ivms8R246
- Ivms8N, Ivms8Nr252
- SLA8N (Not for U.S.), SLA16N, SLA24N256
- Slad4, Slad8, Slad8R262
- Slad16265
- SLC16N (Not for U.S.)272
- SLCN (Not for U.S.)282
- Slmae8, Slmae (Slmae200)289
- Slma, Slma8300
- SLMA2 (for Selected Countries Only)310
- Slmav8, Slmav24321
- Slmo2, Slmo8332
- SLMO8 (Not for U.S.), SLMO24342
- Slu8348
- Slu8R350
- STLS2 (Not for U.S.), STLS4352
- Stls4R358
- Stlsx2, Stlsx4, Stlsx4R360
- Stmd3365
- Stmi2371
- And TCASR-2 (for Selected Countries Only)376
- TLA2 (Not for U.S.), TLA4 (Not for U.S.), TLA8 (Not for U.S.)389
- TLA4R (Not for U.S.)392
- Tm2Lp394
- TMAMF (for Selected Countries Only)402
- Tlani2, Tlani4, Tlani8406
- Tlani4R409
- Tmani, Tmani-IM, Tmani-Bra [Tmani8]412
- TMC16 (for Selected Countries Only)420
- TMCAS (for Selected Countries Only)426
- TMCAS-2 (for Selected Countries Only)435
- TMDID (for U.S. Only)445
- TMDID2 (for Selected Countries Only)450
- Tmew2459
- TMGL4 (for U.S. Only)466
- TMGL4R (for U.S. Only)468
- TMQ4 (for U.S. Only)470
- TST1 (for U.S. Only)472
- TS2N (Old: TS2) [Not for U.S.], TS2R (Not for U.S.)475
  - 4SLA (Not for U.S.), 8SLA, 16SLA (Not for U.S.)480
  - 8Slar483
- Options485
  - Alum4486
  - Amom490
  - ANI4 (for Selected Countries Only)492
  - ANI4R (for Selected Countries Only)496
  - Announcement and Music Modules498
  - Evm502
  - EXMNA (for U.S. Only)504
  - GEE12 (Not for U.S.), GEE16 (Not for U.S.), GEE50 (Not for U.S.)506
  - HOPE (for U.S. Only)508
  - OPAL and OPALR510
  - PFT1 (Not for U.S.), PFT4 (Not for U.S.)512
  - Reals515
  - STBG4 (for France Only)520
  - Strb, Strbr522
  - USB V.24 Adapter527
  - V24/1 (Not for U.S.)528
  - V.24 Adapter530
  - V.24 Cable531
4 Installing Hipath 3000535
- Installing Hipath 3800535
- Installing Hipath 3550, Hipath 3350, Hipath 3500, and Hipath 3300617
5 Starting up Hipath 3000666
- Starting up Hipath 3800666
- Starting up Hipath 3550, Hipath 3350, Hipath 3500, Hipath 3300675
6 Startup and Administration Hipath 5000684
- Introduction684
- Software Structure686
- Notes on Open Numbering in a Hipath 3000/5000 Network689
- Installation Requirements690
- Server Networking692
  - Features of IP Networking692
  - IP Network and Application Server Requirements694
- Starting Hipath 5000698
- Modifying Hipath 5000 Components (Retro-Fitting, Updating, Deleting)716
  - Version-Wide Upgrading of an Existing Hipath 5000 Installation717
- Performing Licensing719
- Optimizing Operating System Settings720
- Perform Hipath 5000 Basic Configuration729
  - Configuring Hipath 5000 RSM as a Central Administration Unit in an IP Network730
    - Creating a Central Customer Database for IP Networking730
    - Adding Individual Nodes for IP Networking732
- Getaccount734
  - Parameters for Call Data Export734
- Connecting an Uninterruptible Power Supply to Hipath 5000738
7 Starting Hipath 3000 as a Gateway741
- Starting Hipath 3800 as a Gateway742
  - Prerequisites742
  - Procedure for Installation and Startup742
- Starting Hipath 3500 as a Gateway745
  - Prerequisites745
  - Procedure for Installation and Startup745
- Starting Hipath 3300 as a Gateway748
  - Prerequisites748
  - Procedure for Installation and Startup748
8 Licensing751
- Licensing Fundamentals752
- Licensing for Hipath 3000 V9, Hipath 5000 V9754
- Licensing Scenarios767
- Licensing Opticlient Attendant V9 to Hipath 3000 V9781
- Protection against License Manipulation783
9 Expanding and Upgrading Hipath 3000785
- Hipath 3000Expanding786
- Upgrading Hipath 3000814
10 Workpoint Clients828
- Openstage Product Family828
- Optipoint 410 / Optipoint 410 S and Optipoint 420 / Optipoint 420 S871
- Central Administration of IP Workpoints Via the System899
  - Plug&Play Startup of IP Workpoints900
  - Software Upgrade of IP Workpoints Via the System901
- Optipoint 600 Office903
- Optipoint 500906
- Key Programming931
- Optilog 4Me932
- Optipoint Accessories933
  - External AC Adapters933
    - Local Power Supply for Optipoint 500, Optipoint 600 Office933
    - Power Supply Unit for Optipoint 410/410 S and 420/420 S935
  - Headsets936
- Openscape Personal Edition938
- Hipath AP 1120940
- Optipoint WL2 Professional/Optipoint WL2 Professional S941
- Attendant Console Versions947
- Mobile Telephones for Hipath Cordless Office953
- Analog Telephones for Hipath 3000960
- ISDN Terminals for Hipath 3000961
11 Hipath Cordless Office963
- Introduction964
- System Configuration965
- Technical Data for Base Stations966
- Power-Related Capacity Limits968
- Multi-SLC and System-Wide Networking971
- Planning Notes for Networked Hipath 3000 Systems Featuring Network-Wide Roaming973
12 Service975
- System Administration Options977
- Installation and Administration of Plug PC for Hipath 3000 Remote Access Appliance981
- Service and Maintenance Tasks991
- Guided Maintenance1011
- Correcting Errors1075
- Remote Service1077
- Security Features1084
  - Access Security1084
  - Automatic Logging of Administration Procedures1094
13 Hipath 3000/5000 in the LAN Network1099
- Network Protocols1100
  - Sip / Sip-Q1101
- Standards Supported1102
- Qos - Quality of Service1103
  - Goals of Qos1103
  - Qos in the Router1103
- Hipath's Network Analysis Service1104
- LIM/LIMS Board for LAN Connection1105
- HG 1500 Board1106
  - Protocols1110
  - Protocols Used1112
- Security/Firewall/Packet Filter1113
- IP Networking1114
- Voice over IP (Voip)1118
  - General Parameters for Voice over IP1119
  - Voice Coding1120
  - DTMF Handling1120
  - Voice Quality1120
  - Environmental Requirements for Voip1122
- Fax over IP with HG 15001124
- Modem Via IP1126
- Hipath Feature Access (HFA)1126
- Internet Gateway1127
  - PPP, Pppoe and PPTP1128
  - Network Address Translation (NAT)1129
  - Access Protection1129
  - Multilink1130
  - Short-Hold1130
  - IP Control Protocol (IPCP)1130
  - Compression of IP Headers1130
  - Data Compression1130
  - IP Accounting1131
- Virtual Private Network (VPN)1132
  - Secure Mode1133
  - Security Policy1135
  - Security Associations1135
  - Tunnel1136
  - Data Security1137
- System Client1137
- Displaying, Adding and Configuring PKI Servers1137
- Routing1138
- Call Charge Allocation and Callback1139
- Internet Access1140
  - HG 1500 and Access to the Internet Via a Network Provider1141
  - Internet Access Via T-DSL (T-ISDN DSL)1141
  - IP Address Mapping1142
- Remote Control1143
- Safety Mechanisms ("Security")1143
  - Firewall1144
  - Alive Monitoring with Keep Alive1145
  - Monitoring IP Data Packages with Rpcap and Wireshark (Ethereal)1145
- Management Tools1146
  - Overview1146
  - Multi-Gateway Administration (MGA)1147
- IP Trunking1151
  - Overview1151
  - Features of IP Networking1152
  - Network-Wide Features with IP Networking1155
  - Special Features of Windows Networks1157
    - Routing and Name Resolution1157
- IP Payload Switching1158
- Applications over IP1160
  - Call Detail Recording Central (CDRC) Via IP1160
  - CSTA Via IP1162
- Administration & Fault Management1163
  - Overview1163
  - SNMP Functions1164
  - Administering Hipath 3000/5000 Via the LAN Interface1171
A System Programming Codes (Expert Mode Codes1173
- Introduction1173
- Accessing System Administration1173
B Codes for Activating/Deactivating Features1205
CIP Protocols and Port Numbers Used with Hipath 3000/5000 V7 and Higher1225
D Identifying System Power Requirements1253
- Hipath 3800 Board Power Requirement1254
- Hipath 3550 Board Power Requirement1256
- Hipath 3350 Board Power Requirement1258
- Hipath 3500 Board Power Requirement1260
- Hipath 3300 Board Power Requirement1262
- D.6 Workpoint Client, Add-On Device, and Adapter Power Requirements1263
- Checking Whether the Output of a Power Supply Unit Is Sufficient1266
- Identifying the Primary System Power Requirement1269
E Notes for Editing the File Snmpd.cnf1271
- Introduction1271
- Trap Destination1271
- Community (Read/Write1274
- Consequences for the File Snmpd.cnf1275
F Country Versions1277
- Country Versions with Own Country Code1277
- F.2 Countries with Country Code "IM"1279

Siemens HiPath 3000 Series - Virtual Private Network (VPN)

Table of Contents

Related product manuals