Example 2 - 3Com 3C8S5007 - SuperStack II PathBuilder S500 Switch User Manual

70 C 5: C
HAPTER ONFIGURING AND

Example 2

Remote
workstation
M V
ONITORING IRTUAL
3 Configure the RAS service to allow authentication of the user by a server,
such as a RADIUS server (see the Configuring Remote Access Services
chapter in Using Enterprise OS Software).
The firewall and RAS functions can also be configured on the PathBuilder
switch. The configuration example in Figure 18 shows these services
being performed on separate devices, for purposes of clarity.
In Figure 19, the remote workstation is configured to create a tunnel
directly to the central site.
Refer to the documentation for your workstation or consult your
operating system vendor for instructions on how to configure your
workstation as the remote PPTP/L2TP client.
Figure 19 Remote Workstation to Central Site Tunnel
ISP
Authentication
server
The connection process typically follows this order:
The remote client dials the ISP.
The ISP assigns an IP address to the client.
The remote client sends data to the IP address of the central site.
The Windows 95/NT workstation client creates a PPTP tunnel to the
central site based on authentication data.
The central site checks its authentication server to verify that this user
can access the network and forwards the data.
P N
RIVATE ETWORKS
PPTP or L2TP tunnel
Firewall
or CSU/DSU
(optional)
Central site
PathBuilder
switch
Authentication
server