Applications Overview; Branch-Office Virtual Private Network Over Frame Relay Service; Branch-Office Virtual Private Network Over A Frame-Relay Service Network - Patton OnSite 3210 Series User Manual

G.shdsl vpn router

Table of Contents

OnSite Model 3210 User Manual

1 • General information

Applications overview

Patton's OnSite managed VPN routers deliver the features you need for secure, optimized communication

over non-secured IP networks. Combining VPN tunneling, standard IPSec encryption, and firewall capabili-

ties with Patton's powerful quality of service technology, OnSite VPN routers deliver private, prioritized net-

working for business, government, and military applications.

Banking, insurance, retail, utilities, railroads, or government, any organization with more than one site can

benefit from the security and traffic-shaping advantages of the OnSite family of VPN routers. As traffic

traverses unsecured networks, VPN tunneling with standard IPSec encryption plus firewall capabilities preserve

data security and integrity. Meanwhile, OnSite's ToS/Qos traffic-shaping and prioritization prevent critical

information getting blocked or impeded by less important traffic while enhancing the quality of real-time

applications such as voice and video.

OnSite 3210 Series models provide dual 10/100Base-T Ethernet ports with a G.SHDSL port. The two Ether-

net ports provide full-featured IP routing plus Ethernet and IP-layer QoS services. The G.SHDSL port pro-

vides WAN access by means of a leased-line connection to the network. The following sections show some

typical applications for the OnSite 3210 Series.

This chapter describes typical applications for which the OnSite 3210 Series series is uniquely suited.

Featuring VPN tunneling combined with built-in frame-relay support and a selection of standard serial inter-

faces on-board, the OnSite 3210 Series offers the remote-branch office a secure, private and prioritized net-

work connection to another location over virtually any available network service and any standard WAN

interface.

Figure 5. Branch-office virtual private network over a Frame-Relay service network

Figure 5

shows a branch-to-branch VPN connection through a frame-relay service network as delivered on

serial lines. The OnSite 3210 Series can support a similar scenario with network service delivered via an Ether-

net WAN interface. For remote sites where PPP service is available, the 3210 Series also supports PPP network

access over all the standard WAN interface options mentioned above.

In this specific application, all traffic between the branch and corporate offices is carried in an IPSec tunnel. All

of the IPSec VPN traffic is encapsulated in Frame Relay for transport over the Frame Relay service network.

The serial port is configured for Frame Relay.

Table of Contents