Data Confidentiality; Data Integrity; Data Origin Authentication; Vpn Applications - Nortel BSR252 Configuration - Basics

202 Chapter 13 VPN

Data confidentiality

The IPSec sender can encrypt packets before transmitting them across a network.

Data integrity

The IPSec receiver can validate packets sent by the IPSec sender to ensure that the
data is not altered during transmission.

Data origin authentication

The IPSec receiver can verify the source of IPSec packets. This service depends
on the data integrity service.

VPN applications

The Business Secure Router supports the following VPN applications:
•
•
•

IPSec architecture

The overall IPSec architecture is shown as follows in
NN47923-500
Linking Two or More Private Networks Together
Connect branch offices and business partners over the Internet with
significant cost savings and improved performance when compared to leased
lines between sites.
Accessing Network Resources When NAT Is Enabled
When NAT is enabled between the WAN and the LAN, remote users are not
able to access hosts on the LAN unless the host is designated a public LAN
server for that specific protocol. Since the VPN tunnel terminates inside the
LAN, remote users can access all computers that use private IP addresses on
the LAN.
Unsupported IP Applications
A VPN tunnel can be created to add support for unsupported emerging IP
applications.
Figure 64.