Nortel NN46120-104 User Manual page 23

•
•
•
•
•
SSL Acceleration is covered in the Application Guide for SSL Acceleration.
Scalability and Redundancy
•
•
•
•
•
Certificate and Key Management
•
•
•
•
•
•
Public Key Infrastructure
•
•
•
•
Copyright © 2007-2008 Nortel Networks
.
Ability to create multiple clusters of VPN Gateways, each capable of
serving its own group of real servers.
Supports rewriting of client requests.
Ability to transmit additional information to the backend servers.
Supports end-to-end encryption.
Compatible with all Nortel Application Switches, Nortel Web Switches
and comparable switches from other vendors.
Support for 256 VPN Gateways per cluster
Support for 256 virtual SSL servers
Provides dynamic plug and play – VPN Gateways can be added to or
removed from a cluster dynamically without disrupting network traffic
Provides a single system image (SSI) – all VPN Gateways in a given
cluster are configured as a single system
High level of redundancy in the master/slave cluster design; even if
three master VPN Gateways in a cluster would fail, additional slave
NVGs will still be operational and can accept configuration changes
Server and client authentication
Generation and revocation of client certificates
Automatic retrieval of certificate revocation lists (CRLs)
Validation of private keys and certificates
Generation of certificate signing requests (CSRs)
Generation of self-signed certificates
RSA pair key generation
Server certificate enrollment
Server key and certificate import/export
Key and certificate renewal
Nortel VPN Gateway
NN46120-104 02.01 Standard
14 April 2008
User Guide
Software Features 23