Figure 1 An Intranet And The Internet Make Up An Extranet - Nortel Contivity 2600 Getting Started

16 Chapter 1 Introducing the Contivity

Figure 1 An intranet and the internet make up an extranet

E-M ail
S erver
NT
Server
Authentication
Server
Intranet
The Contivity provides more security than traditional remote access schemes due
to the combination of authorization, authentication, privacy, and access control on
a per user basis. Additionally, the IPsec protocol and related Internet Security
Association and Contivity Key Management Protocol (ISACKMP) and Oakley
key establishment protocol support further enhance the security offering.
For authentication and access control, the Contivity supports an internal or
external Lightweight Directory Access Protocol (LDAP) server, and external
Remote Authentication Dial-In User Service (RADIUS) servers. To restrict
access, the Contivity uses packet filtering based on Protocol ID, Direction, Source
and Destination IP addresses, Source and Destination Ports, and TCP connection
establishment.
311120-B Rev 00
LAN
Contivity
Firewall Router
Extranet
Cable or D SL
ISP PO P
IS P PO P
ISP P O P
ISP PO P
ISDN
Internet
Rem ote
Em ployee
P artner
56K
M odem
Reseller