Red privada virtual

Notas del editor

• #3: Today’s classic WAN is built on leased lines to connect fixed sites
• #4: The classic WAN has strengths listed above, but it has some significant challenges like: Adding new remote sites to the WAN Adding very remote sites where it is very expensive to extend the WAN Growing remote access populations External connectivity to business partners Cost
• #5: Classic WAN is often cost prohibitive to extend to smaller remote offices Classic WAN doesn’t extend to very remote offices where leased lines or frame relay are not available, such as international locations Classic WAN does not extend to extranets or very large remote dial access populations, especially as remote access population grows
• #6: “ public network” - “ Shared Public Network Infrastructure” - Nortel The key is the public network. “Public Network” is often referring to the Internet.
• #25: Traditionally, modem banks and 800 numbers would provide remote access to enterprise resources. Install a VPN and let employees connect through their ISP, greatly reduce support, equipment, and maintenance costs and provide security where there was none. A typical company will save $1000 per remote user per year.
• #26: A Contivity Extranet Switch is designed to drop into the corporate network and take advantage of the infrastructure that has been built around the remote access system. Users are authenticated against external databases using RADIUS, NT Domain, or LDAP (the emerging standard). This also allows support for NDS, SecureID, and more. The EAS is managed via HTML and Java, making it accessible from anywhere. Scriptable SNMP traps allow any combination of variables to be queried to sense problems. This allows integration into network management stations like HP OpenView. On the network map, an SNMP trap for an error condition would turn the icon for the Nortel Networks box from green to red. When the network manager double-clicks on the icon, the browser would be launched to the device management pages. Split-horizon management allows the management demarcation between the corporation and service provider to be customized. The service provider can manage none of the device, just the networking portion, or the networking and user security. This allows different service levels to be offered as well, with different levels of management. Users can take advantage of high-speed Internet access technologies like ADSL and cable which can’t usually be used for corporate access. These types of technologies will only be widely used if they can be tied to a business use. Casual consumers won’t pay the premium for high-speed Internet access.
• #27: (# builds = 5) Instead of expensive, hard to provision, private leased-lines, use VPNs and broadband access to interconnect all branches. Extranets --shared networks with business partners-- can be setup and taken down at Internet speed. Even this amount of management can be outsourced to a service provider, allowing enterprises to focus on their core business, and letting the service provider worry about IT turnover, etc.
• #28: (# builds = 5) The Boston Branch needs to access data from a server in Seattle. The Boston VPN Gateway contacts the Seattle Gateway. Seattle authenticates that Boston is Boston, and that they are allowed to have access to the requested server,then lets them in. All of the authentication communication is encrypted and all the data is encapsulated and encrypted.