
Secure Remote Access Technical Solution Guide v1.0
______________________________________________________________________________________________________
21
is controlled by the MCS Client as part of a home office or small office configuration, you can use
inverse split tunneling to direct all traffic through the VPN Gateway, except a specified local
subnet used for IP communication between the MCS Client and the IP Phone.
4.2.3 IP Telephony and multimedia
4.2.3.1 Considerations for IP Telephony
No configuration or software changes are required on IP Telephony or multimedia platforms to
support remote access clients. The remote clients connecting through IPsec or NetDirect appear
as standard IP soft clients connecting through the pool address ranges.
Ideally, keep the Communication Servers relatively close to the VPN Gateway within the network.
For example, if you have a large network spanning a continent, collocating the VPN Gateway with
the Communication Servers reduces the latency for VoIP traffic and avoids longer round trips,
which can impact voice quality.
4.2.3.2 VPN Router 200 Series and small office/home office (SOHO) IP set solution
The VPN Router 221 and 251 models provide a solution for environments such as small offices
and home offices where there is a need for continuous access to the enterprise network and a
requirement to support IP Phones. This solution, as depicted in Figure 4, supports PC and IP
Phone access, and there is no PC requirement for the operation of the IP Phone. Multiple IP
Phones can be supported behind a single DSL or Cable Modem broadband connection, and full
connectivity to the VoIP and data infrastructure is provided. This solution is currently compatible
with the Nortel Communication Server 1000 Release 4.0.
Figure 4: Small office/home office VPN Router 221/251 solution
Comentarios a estos manuales