Tunnel Management Server; Customer/Home/Internet Service Provider Network; Customer Premise Equipment (Cpe) - Bay Networks Baystream 7 Configuration And Troubleshooting Manual

Configuring and Troubleshooting Bay Dial VPN Services

Tunnel Management Server

The NAS retrieves the tunnel configuration attributes from its tunnel management
system (TMS) database residing on the tunnel management server and uses them
to build a tunnel into the customer's network. Once the tunnel is open, the user can
be authenticated at the customer's network. Dial VPN lets you choose between
two methods of tunnel management: erpcd-based or RADIUS-only.
•
•
The TMS database lets the NAS query for the addressing information it needs to
construct the IP tunnel. This query is based on the user domain name, and on the
policy and state information of the enterprise customer account when the remote
user dials in. As a Dial VPN network administrator, you must provide the user
domain and tunnel addressing information to the TMS database for each
enterprise customer.
the default TMS database.

Customer/Home/Internet Service Provider Network

The Dial VPN network interacts with the customer premise equipment (CPE) and
the RADIUS authentication server on the customer's destination network.
Note: Dial VPN supports standard ACP logging. A destination network can
provide and maintain its own accounting server, independent of Dial VPN.

Customer Premise Equipment (CPE)

The CPE is a frame relay router that connects to the Dial VPN network by means
of frame relay PVCs. The CPE routes traffic from the remote nodes to hosts on the
home network and from the home network hosts back to remote nodes.
1-6
In the erpcd-based method, the TMS hosts a database application (the Tunnel
Management System) that controls the IP tunnel establishment attempt from
the NAS. TMS runs on the same UNIX host as the Access Control Protocol
(ACP) software. The NAS and the TMS communicate using the Bay
Networks proprietary Expedited Remote Procedure Call Daemon (erpcd or
Secure erpcd).
In the RADIUS-only method, a RADIUS server resides on the service
provider site and manages the TMS database. The NAS and the RADIUS
server communicate using IP over the service provider network.
Chapter 5
BayStream Multiservice Software Version 7.2
describes the commands you can use to provision
115623B Rev. 00