Enterprise Intranet Security - Huawei AR1220-S Product Description

Huawei AR1200-S Series Enterprise Routers
Product Description
Figure 2-2 VPN access

2.3 Enterprise Intranet Security

The ARs, located between the enterprise intranet and the Internet, ensure information security
on the entire intranet and intranet LANs.
As shown in
the Internet cannot access the intranet. To allow the users on the intranet to access the Internet,
configure network address translation (NAT) on the intranet. The financial department and
marketing department have individual LANs on the intranet. The ARs utilize a demilitarized
zone (DMZ) to protect the server on the external network. In addition, the application specific
packet filter (ASPF) firewall can be deployed to protect the intranet.
The ARs provide network access control (NAC) to restrict the access permissions of internal
users. This ensures that only authorized users can access the intranet.
Issue 01 (2011-08-15)
GRE/IPSec VPN
tunnel
AR
Branch
Figure 2-3, an intranet and the Internet are connected by the ARs. The users on
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Headquarters
AR
Employee on
business trip
IPSec VPN tunnel
Employee on business trip
IPSec VPN tunnel
2 Network Applications
7