Cisco MX84 Cloud Managed Security Appliance Bedienungsanleitung

Cisco Firewall (Hardware) MX84 Cloud Managed Security Appliance

Lesen Sie kostenlos die 📖 deutsche Bedienungsanleitung für Cisco MX84 Cloud Managed Security Appliance (8 Seiten) in der Kategorie Firewall (Hardware). Dieser Bedienungsanleitung war für 11 Personen hilfreich und wurde von 2 Benutzern mit durchschnittlich 4.5 Sternen bewertet

Download PDF

Seite 1/8

White Paper

Cisco Meraki Auto VPN

JU LY 2013

This white paper describes Auto VPN (Layer 3 site-to-site IPsec) and

how to deploy it between Cisco Meraki Security Appliances.

Trademarks

Meraki® is a registered trademark of Cisco Systems, Inc.

Table of Contents Introduction 

Cisco Meraki’s Solution 

For More information 

Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com

Introduction

What is VPN?

Virtual Private Networks (VPNs) are used by most organizations seeking to provide teleworkers

with pseudo on-site access to core network resources or to connect branch oces to a core

network. VPNs are encrypted tunnels that allow for the secure, conﬁdential transfer of data across

unsecured, public infrastructure — typically, the Internet.

What is site-to-site VPN?

One of the most common implementations of VPN is site-to-site VPN, where one location hosting

network resources is securely connected via VPN to another location (which may also be hosting

resources); usually the two locations are part of the same organization.

The diagram below shows a site-to-site VPN:

Site-to-site VPNs are deployed between the security appliances/ﬁrewalls at each location. The

client devices (such as laptops or workstations) behind these ﬁrewalls do not need software

installed or local settings conﬁgured to enable them to send or receive data with the other sites.

In a site-to-site VPN (also known as “spoke-to-spoke”), all of an organization’s individual mesh

networks are connected to one another via VPN. In a topology, all of the satellite hub-and-spoke

branch oce networks (“spokes”) tunnel back to a central oce (“hub”) over VPN; the spokes do

not exchange data directly with one another.

Why is VPN hard?

With traditional architectures, the conﬁguration and management complexity of multi-site VPN

can become prohibitive as the number of distributed sites increases. This is because both ends of

each VPN tunnel need to be manually created and tuned, often through a complex command line

interface. This is a time-consuming and error-prone process: variables such as the IP addresses of

both security appliance interfaces, a pre-shared key or certiﬁcate, authentication and encryption

protocols, a list of exportable subnets, and more need to be manually speciﬁed and conﬁgured

twice for each tunnel. Imagine: if a primary WAN uplink fails over to a 3G/4G link and the external

IP address of the VPN changes, all of these settings would need to be re-established for the new

address for VPN functionality to resume.

INTERNET

Encrypted IPsec VPN tunnel

Network A

LOCATION

1 L

OCATION 2

Client devices A1, A2,

and A3 on Network A

Client devices B1, B2,

and B3 on Network B

A1 A2 A3 B1 B2 B3

10.1.0/24

Network B

192.168.1.0/24

Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com

Produktspezifikationen

Marke:	Cisco
Kategorie:	Firewall (Hardware)
Modell:	MX84 Cloud Managed Security Appliance
Gewicht:	4100 g
Übertragungstechnik:	Kabelgebunden
AC Eingangsspannung:	100-220 V
AC Eingangsfrequenz:	50 - 60 Hz
Anzahl USB 2.0 Anschlüsse:	1
Betriebstemperatur:	0 - 40 °C
Relative Luftfeuchtigkeit in Betrieb:	5 - 95 %
Netzstandard:	IEEE 802.11a, IEEE 802.11b, IEEE 802.11g, IEEE 802.11n
Warentarifnummer (HS):	85176990
Stromverbrauch (max.):	32 W
Maximale Datenübertragungsrate:	1000 Mbit/s
Zahl der Benutzer:	200 Benutzer
WAN Port:	Ethernet (RJ-45)
Stromversorgung:	100 W
Rack-Einbau:	Ja
Formfaktor:	1U
Abmessungen (BxTxH):	483 x 254 x 44 mm
HDD Kapazität:	1000 GB
Speichermedien Typ:	HDD
Anzahl VPN-Tunnels:	100
Anzahl installierten SFP Module:	2
Firewall Durchsatz:	500 Mbit/s
VPN Durchsatz:	250 Mbit/s
Anzahl VPN Anschlüsse:	100