Avaya 3.7 Configuration Manual page 315

Release 3.7
Table of Contents

Advertisement

Dynamic VPNs
Dyna Policy
E
Encapsulation
Extranet security
gateway
F
Firewall
H
Heartbeat
IKE (Internet Key
Exchange)
IP Groups
IPSec
ISAKMP
Issuer Certificates
Dynamic VPNs are VPNs that can be readily scaled as dictated by business
demands. As the remote client user population grows, the authentication and
session configuration information for each new user must necessarily also
grow. By maintaining this information not in the security gateway's flash
memory but on a dedicated network host device, the number of users becomes
unlimited. Two techniques of achieving this functionality normally used are
LDAP or RADIUS.
An Avaya VPN term relating to a dynamic configuration download of VPN
session security parameters to the remote client computer upon connection to a
security gateway. This technique assures maximum security in a VPN session.
The process of placing the contents of one packet into that of payload of
another packet.
It is possible to create a Group associated with a security gateway that is not
managed by your company's VPNmanager. This happens when creating
"extranets," or VPNs between partner corporations. In an extranet, each
corporate network uses VPN components that are managed separately by each
company's system administrator.
A network device acting as a filter to restrict access to private network
resources from the public. Filtering typically is based on the types of packets
exchanged between two devices on the network.
A special VPN packet broadcast by a primary security gateway used to facilitate
the resilient tunnel function.
A key-management protocol, IKE defines procedures and packet formats to
establish, negotiate, modify and delete Security Associations (SAs) and defines
payloads for exchanging key generation and authentication data. These
formats provide a consistent framework for transferring key and authentication
data which is independent of the key generation technique, encryption
algorithm and authentication mechanism. Now combined with Oakley to form
IKE.
IP Groups are a convenient means of managing your VPN resources. IP
Groups are collections of IP network mask pairs associated with security
gateways, hosts, and workstations located behind the security gateway.
The network cryptographic protocols for protecting IP packets.
The key-management protocol used in conjunction with IPSec.
See Certificates, Issuer
Issuer Certificates
Issue 4 May 2005
315

Advertisement

Table of Contents
loading

This manual is also suitable for:

Vpnmanager

Table of Contents