Draytek VIGORBX 2000 SERIES User Manual page 332

V - 1 V P N a n d
V - 1 V P N a n d
A Virtual Private Network (VPN) is the extension of a private network that encompasses links
across shared or public networks like the Internet. In short, by VPN technology, you can send
data between two computers across a shared or public network in a manner that emulates the
properties of a point-to-point private link.
The VPN built is suitable for:
Communication between home office and customer

 Secure connection between Teleworker, staff on business trip and main office
Exchange data between remote office and main office

POS between chain store and headquarters

M o b i l e O
M o b i l e O

Implementing Secure Two-Layer Authentications for Teleworkers and mobile VPN
users
Teleworkers or remote users will typically have a password to log into your office VPN.
Although this is quick and easy, if the user saves the password on their PC, writes it down
somewhere or are seen typing it, your VPN and therefore your network is immediately
compromised.
A single password provides just a single layer of security; only one fixed piece of information
to crack, intercept or otherwise get hold of, and that piece requires only the user's memory.
Once intercepted, an authorised person can log into your VPN whenever they wish. By
introducing a second security factor, of a different type, you introduce a two-layer
authentication. By different 'type' we mean that it cannot just be an extra password; it has to
be something that uses a method other than the user's memory.'

Your mobile phone as your key
Authentication devices are now commonly used for online banking to provide a second layer
of security; instead of just a password held in the user's head, they also require some other
320
R e m o t e A c c e
R e m o t e A c c e
n e - T i m e P a s s w o r d s (
n e - T i m e P a s s w o r d s (
s s
s s
M O T P )
M O T P )
VigorBX 2000 Series User's Guide