Specifications

Chapter 6 Using Security Technologies
Using a Virtual Private Network
Niagara Release 2.3
Niagara Networking & Connectivity Guide Revised: May 22, 2002
6–25
Figure 6-13 VPN in use at ABC Company.
Local IP Address:
209.252.1.27
VPN Address:
192.168.100.57
Internet
Firewall with Proxy
and NAT and
VPN handling
decryption and
authentication
from clients
NAT Addresses: 204.253.56.x
VPN Addresses: 192.168.100. x
ABC Company
Network: 192.168.1.x
Subnet Mask: 255.255.255.0
IP Address:
192.168.1.125
Subnet Mask:
255.255.255.0
Router
JACE-5
R
x
D
T
x
D
D
A
T
A
1
0
0
E
T
H
E
R
N
E
T
L
O
N
R
x
D
T
x
D
R
x
D
T
x
D
R
S
2
3
2
/
R
S
4
8
5
P
O
R
T
2
R
S
2
3
2
P
O
R
T
1
H
E
A
R
T
B
E
A
T
JACE-NP
Ethernet Hub or Switch
BUI
Ethernet Hub or Switch
Field Controllers Field Controllers
IP Address:
DHCP assigned
Subnet Mask:
255.255.255.0
Web Supervisor
Site 1
Modem
LAN IP Addresses
External IP Address:
204.253.56.14
Inside IP Address:
192.168.1.53
Dial-in IP Addresses
IP Address for
RAS Server:
192.168.1.183
IP Address for
Dial-in Client:s:
192.168.1.184
LAN IP Addresses
Local IP Address:
192.168.1.120
Subnet Mask:
255.255.255.0
Site 7
DSL or
Cable ISP
D
S
L
o
r
c
a
b
l
e
c
o
n
n
e
c
t
i
o
n
Network settings assigned
by DHCP on router:
IP address: 192.168.6.5
Default GW: 192.168.6.1
Internal port IP address:
192.168.6.1
External port IP address
Assigned by ISP:
209.98.36.10
Assigned by VPN:
192.168.100.12
P
r
i
v
a
t
e
L
e
a
s
e
d
D
a
t
a
L
i
n
e
Router
Ethernet Hub or Switch
IP Address:
192.168.2.98
Subnet Mask:
255.255.255.0
Network: 192.168.2.x
Subnet Mask: 255.255.255.0
Site 2
JACE-5
R
x
D
T
x
D
D
A
T
A
1
0
0
E
T
H
E
R
N
E
T
L
O
N
R
x
D
T
x
D
R
x
D
T
x
D
R
S
2
3
2
/
R
S
4
8
5
P
O
R
T
2
R
S
2
3
2
P
O
R
T
1
H
E
A
R
T
B
E
A
T
Remote Engineering
Station with VPN
client
VPN Tunnel
Router
DSL or
Cable Modem
Router
with NAT, DHCP,
and VPN client
VPN Tunnel
JACE-NP