Ipsec - Sierra Wireless AirLink RV50 Series User Manual

ALEOS 4.9.0 Software Configuration User Guide for AirLink RV50 Series
Field
Incoming Out of Band
Outgoing Management
Out of Band
Outgoing Host Out of
Band
Rev 1 Dec. 17
Description
Controls incoming public Internet traffic
Options are:
Blocked—Incoming public Internet traffic is blocked. Only traffic
•
through the VPN tunnel is allowed. (default)
Allowed—Incoming public Internet traffic is allowed.
•
Controls outgoing traffic from the AirLink gateway
Blocked—Outgoing traffic from the AirLink gateway to the public
•
Internet is blocked. Only traffic through the VPN tunnel is allowed.
Allowed—Outgoing traffic from the AirLink gateway to the public
•
Internet is allowed. (default)
Controls of outgoing Host out of band traffic.
Options are:
Blocked—Public Internet traffic from the host device is blocked. Only
•
traffic through the VPN tunnel is allowed. (default)
Allowed—Public Internet traffic from the host device is allowed.
•

IPsec

The IP protocol that drives the Internet is inherently insecure. Internet Protocol
Security (IPsec), which is a standards-based protocol, secures communications
of IP packets over public networks.
IPsec is a common network layer security control and is used to create a virtual
private network (VPN).
The advantages of using the IPsec feature includes:
• Data Protection: Data Content Confidentiality allows you to protect your data
from any unauthorized view, because the data is encrypted (encryption
algorithms are used).
• Access Control: Access Control implies a security service that prevents
unauthorized use of a Security Gateway, a network behind a gateway or
bandwidth on that network.
• Data Origin Authentication: Data Origin Authentication verifies the actual
sender, thus eliminating the possibility of forging the actual sender's identifi-
cation by a third-party.
• Data Integrity: Data Integrity Authentication allows both ends of the communi-
cation channel to confirm that the original data sent has been received as
transmitted, without being tampered with in transit. This is achieved by using
authentication algorithms and their outputs.
The IPsec architecture model includes the Sierra Wireless AirLink gateway as a
remote gateway at one end, communicating through a VPN tunnel with a VPN
gateway at the other end. The remote gateway is connected to a remote network
and the VPN is connected to the local network. You can configure up to three
remote subnets.
138 41111088