论文部分内容阅读
Xylan公司关于VPN的观点体现在两个不同的方面:企业网和互连网。 Xylan公司是通过基于策略的VLAN技术在企业网中实现VPN策略的。Xylan公司的产品能够实现9种不同类别的VLAN配置,并且能够在其广域网和局域网上通过WSM(广域网交换模块)来扩展VLAN。这些技术使网络管理员能够在局域网或广域网上以非常灵活的方式将他们的企业网划分成不同的广播域。 Xylan公司的VLAN技术不仅能使企业网用户受益,而且PTT和ISP也能够利用Xylan的扩展VLAN特性支持在公共网络中实现VPN服务。由于Xylan的VLAN技术对于象ATM、帧中继和FDDI等于线来说是完全透明的,因此PTT可以通过在主交换局或子交换局使用OmniSwitch交换机为客户提供VPN服务,并且可以使用Xylan的VLAN技术实现对网络的分割。 Xylan公司能够将FireWalI-1检查模块和交换机集成在一起的,通过在OmniSwitch交换机中安装防火墙软件,使得它能够支持网络地址转换、客户和会话验证以及FireWall-1v4.0。OmniSwitch交换机中的Firewall-1还可
Xylan company’s point of view on the VPN reflected in two different areas: the corporate network and the Internet. Xylan is implementing VPN policies in enterprise networks with policy-based VLAN technology. Xylan’s products enable 9 different categories of VLAN configurations, and are capable of extending VLANs over their WAN and LAN over WSM (Wide Area Network Switching Module). These technologies enable network managers to divide their corporate networks into different broadcast domains in a very flexible manner over LANs or WANs. Xylan’s VLAN technology not only benefits enterprise network users, but also enables PTT and ISP to leverage Xylan’s extended VLAN features to enable VPN services over public networks. Because Xylan’s VLAN technology is completely transparent to ATM, Frame Relay, and FDDI equalization lines, PTT can provide customers with VPN services by using OmniSwitch switches at the main or sub-switching office, and can use Xylan’s VLAN Technology to achieve the network segmentation. Xylan is able to integrate FireWalI-1 inspection modules with switches through firewall software installed in OmniSwitch switches, enabling it to support network address translation, client and session authentication, and FireWall-1v4.0. Firewall-1 in OmniSwitch switches is ok