Table of Contents
Advertisement
WEP does not secure or encrypt an Internet connection. Therefore Nokia recommends using
VPN in information critical applications, especially in corporate networks, where security and
manageability are most important.
4.5.2 VPN
The introduced remote access architecture is composed of two main parts: the VPN server
and the VPN client. The VPN server extends the corporate network with Internet access and
offers a secure access to the corporate network resources from all alternative wireless
networks: GPRS, HSCSD, or wireless LAN. The server offers remote access services to all
kinds of remote users: home workers, GPRS roamers, public wireless LAN users, etc. This
reduces administration costs and simplifies the network architecture. Typically, the company
IT department administrates the VPN server.
The VPN client software is installed on the user's PC and is run on top of the Nokia D211
software. The same standard client configuration is used together with both GPRS and
WLAN. The client automatically establishes a secure tunnel to the company VPN server. In
addition, it may offer a personal firewall, which protects the PC against attacks. The company
may select the most suitable VPN client, as the Nokia D211 is compliant with leading VPN
clients.
The Nokia D211 allows the user to deploy conventional dial-up networking. In this
configuration, the VPN client is not required, but the connection is established using standard
Microsoft Windows dial-up functions.
VPN is the correct way to build a secure, private communication infrastructure on top of the
Internet. There are a number of benefits with using Internet connectivity, GPRS, and WLAN
whenever available:
•
Rather than having the user making long distance phone calls to dial the company
directly, GPRS and wireless LAN allow the user to utilise the public Internet
connection.
•
The charging in WLAN and GPRS is typically based on the data volume transmitted,
not on the connection time. Thus, e-mail and browsing may be significantly cheaper
over this kind of connection.
•
With VPN, the companies get rid of their modem pools, expensive leased lines, and
remote-access servers.
•
Further savings come from reducing the operational costs associated with supporting
remote users.
The security aspects have been considered in the product design. The Nokia D211 is
interoperability tested in depicted reference designs with leading VPN client manufacturers'
software and with Microsoft's embedded Internet security (IPSEC) solutions. Detailed
information of the security issues can be found at www.nokia.com.
30/113
Advertisement
Table of Contents
