Outbound VPN client connections
Clients on the LAN can establish VPN connections to
external VPN concentrators. Local network clients with
three types of IP addressing are noted in this section:
• Client Type A - Local clients with non-routable
addresses issued by the BT Business Hub and which
connect to the Internet via Network Address
Translation (NAT/dynamic).
• Client Type B - Clients for which the BT Business
Hub firewall has been configured for DMZplus
operation. In this scenario, the local client 'shares'
the broadband IP address with the BT Business
Hub. Only one client can share the broadband
IP address; thus, only one computer may be
configured for DMZplus at a time.
• Client Type C - Client computers on the network
for which a routable, Static IP address has been
configured. This IP address is configured either directly
by changing the TCP/IP settings of the computer or by
assigning the S
tatic IP address automatically using
the BT Business Hub address allocation feature.
Appendix B: The BT Business Hub's
inter-operability with VPN
VPN Scheme Client Type Supported Configuration
L2TP Client NAT (A) Fully Supported
DMZplus (B) Fully Supported
Static IP (C) Fully Supported
PPTP Client NAT (A) Fully Supported
DMZplus (B) Fully Supported
Static IP (C) Fully Supported
IPSec Client NAT (A) ESP Tunnel-mode only
DMZplus (B) ESP Tunnel-mode only
Static IP (C) ESP Tunnel-mode only
The BT Business Hub is designed to inter-operate with a wide range of existing
VPN options. Typical VPN scenarios are described below, including any additional
BT Business Hub configuration required.
23
VPN Scheme Supported Configuration
Hosted L2TP Server Fully supported when firewall
configured to allow all applications
Hos
t
ed PPTP Server Fully supported when firewall
configured to allow all applications
Hosted IPSec Server Fully supported when firewall
configured to allow all applications
Inbound connections to local VPN server
A VPN server can be hosted on the local network.
However, to allow for remote clients to connect to
the VPN server, the BT Business Hub firewall must be
configured to 'Allow All Applications' to pass through
to the VPN server. In the case where multiple
broadband (Static) IP addresses are not available, the
single broadband IP address will be shared via the BT
Business Hub DMZplus feature with the VPN server.
As such, when only one broadband IP address is
available, only one VPN server can be hosted on the
local network.
Dual servers may be used to load balance VPN traffic
using multiple public IP addresses.
(11 pages)
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals