11 setting up virtual private networks, Introduction to virtual private networks, Setting up virtual private networks – Lucent Technologies 6000 User Manual
Page 435: Introduction to virtual private networks -1, Chapter 11: setting up virtual private networks -1, Chapter 11, “setting up virtual private networks
MAX 6000/3000 Network Configuration Guide
11-1
11
Setting Up Virtual Private Networks
Introduction to Virtual Private Networks
Virtual Private Networks (VPNs) provide low-cost remote access to private LANs via the
Internet. The tunnel to the private corporate network can be from an ISP, enabling mobile
clients to dial in to a corporate network, or it can provide a low-cost Internet connection
between two corporate networks. Lucent currently supports three VPN schemes: Ascend
Tunnel Management Protocol (ATMP), Point-to-Point Tunneling Protocol (PPTP) and Layer 2
Tunneling Protocol (L2TP).
An ATMP session can occur only between two Lucent units and must use UDP/IP. The MAX
encapsulates all packets passing through the tunnel in standard Generic Routing Encapsulation
(GRE) as described in RFC 1701. ATMP creates and tears down a cross-Internet tunnel
between the two Lucent units. In effect, the tunnel collapses the Internet cloud and provides
what looks like direct access to a home network. The tunnels do not support bridging. All
packets must be routed with IP or IPX.
The Microsoft Corporation developed Point-to-Point Tunneling Protocol (PPTP) to enable
Windows 95 and Windows NT Workstation users to dial into a local ISP to connect to a private
corporate network across the Internet.
Version 8 of the Internet Engineering Task Force (IETF) draft titled Layer Two Tunneling
Protocol “L2TP,” dated November, 1997, specifies the Layer 2 Tunneling Protocol (L2TP).
L2TP enables you to connect to a private network by dialing into a local MAX, which creates
and maintains an L2TP tunnel between itself and the private network.
Note:
Any MAX unit supporting PPTP or L2TP does not display a terminal-server prompt to
dial-in users, because all dial-in calls are immediately transferred to PPTP or L2TP servers.