Ipsec And Vpn - Technicolor MediaAccess TG650s Setup And User Manual

8 INTERNET SECURITY

8.1 IPSec and VPN

What Is a VPN?
A VPN or Virtual Private Network is a private communications network set up over a publicly accessible network. A VPN
creates a kind of tunnel through which information is transported between a computer and the network to which it is
connected.
What Is IPSec?
IP Security (IPSec) is a way of securing communication over IP. IPSec is used to create a VPN. It allows you to connect your
local computer to the remote network in a safe way as it provides:
Reliable user authentication.

Reliable tunnel encryption able to cope with existing network and firewall settings.

IPSec and VPN on your MediaAccess Gateway
Your MediaAccess Gateway has integrate has an integrated IPSec/VPN client and server allowing you to setup the
following scenarios configure the most common VPN scenarios, for example:
LAN-to-LAN connection

VPN Client configuration

VPN Server configuration

LAN-to-LAN
The MediaAccess Gateway allows you to connect LAN networks that are located on different sites via a secure VPN tunnel
over the public Internet. At each peer the MediaAccess Gateway acts as an IPSec security gateway.
VPN Client
The VPN client in the MediaAccess Gateway can replace a software VPN client installed on a computer. You can use it for
example to connect from your home to the corporate network for teleworking.
Using the VPN client in the MediaAccess Gateway has several advantages over the use of VPN client software installed on
the computer of the end user:
The administrator of the corporate network does not have to worry about upgrades of the operating system on the

teleworker's computer.
Since the VPN client is fully integrated in the MediaAccess Gateway, it can not be tampered with, and is probably more

secure than software residing on a computer.
Adverse interactions with computer software, such as firewalls, PPPoE clients, wireless drivers, viruses and worms are

avoided. This guarantees a better stability and fewer functionality problems.
VPN Server
The MediaAccess Gateway can establish a secure connection with any remote gateway that meets the VPN settings,
regardless its location in the public network. The use of the Extended Authentication protocol can optionally be configured.
In this case, a list of authorized users is composed and stored on the MediaAccess Gateway.
More information
In-depth information about the different scenarios and configuration can be found in the MediaAccess Gateway IPSec
documentation available at www.technicolor.com.
90
DMS-CTC-20111123-0002 v1.0