AVM Access Server englisch Spécifications télécharger pdf (Page 110)

VPN and the IPsec Protocol

108 AVM Access Server – 6 AVM Access Server for Experts

Architecture of the filter profiles

6.7 VPN and the IPsec Protocol

The AVM Access Server incorporates a complete implementation of

IPsec in conformance with the standards. Its features include:

AES, DES and 3DES encryption

payload compression with IPComp

authentication with MD5, SHA-1

authentication using pre-shared keys

XAuth and IKE mode configuration

Negotiation of an IPsec connection takes place using the “Internet Key

Exchange” (IKE) protocol. IKE negotiation results in a set of security pa-

rameters used in common with the remote site, known as a “security

association” (SA). IKE negotiation takes place in two phases. The first

phase is concerned primarily with authentication and with obtaining a

key for encrypted communication in Phase 2. Phase 1 generally yields

exactly one SA.

Global input filter

Masquerading/NAT

Upper incoming

filter profile

IPSec Decryption

ISDN / ADSL / GSM /

LAN

Global output filter

Masquerading/NAT

Upper outgoing

filter profile

IPSec Encryption

ISDN / ADSL / GSM /

LAN

Global forwarding

filter

Decrypted

data

Lower incoming

filter profile

Lower outgoing

filter profile

1 2 ... 105 106 107 108 109 110 111 112 113 114 115 ... 141 142

Pas de commentaire

AVM Access Server englisch Spécifications Page 110