Enterprise VPN Gateway RequirementsNormally, IKE informational messages or modeconfig messages are used to download policy from theenterprise VPN gateway to the VPN client. The enterprise VPN gateway must be modified so that the policy download consists of:• TCP port information and subnet IP address information, so that the VPN client can route packetsthrough either the enterprise tunnel or the network tunnel, based on the application specifiedby the TCP port, and• The IP address of the IPSS, so that the VPN clientknows the endpoint to use when establishing thenetwork-based VPN tunnel.No other major modifications are required at the Having discussed in general, the modificationsthat must be made to VPN clients and gateways tosupport adaptive VPN, we will now consider the specific modifications that must be made to Lucent products to support adaptive VPN. We have implementedadaptive VPN within the Lucent security productsuite. This implementation is discussed in the following section.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
Note: only a member of this blog may post a comment.