Implementation of Mobile VPN

On the basis of traditional VPN technology, we can provide users with new VPN access method by means of GPRS. GPRS, the general Packet Radio Service, is a new kind of packet data transmission technology based on GSM network. Can realize mobile office, E-commerce, online chat, music pictures download, interactive games and location services, such as rich mobile data business applications.

GPRS VPN can provide enterprise users with the function of GPRS network hosting remote access Enterprise Internal network, and provide the same service as traditional VPDN. Enterprise users use the GPRS terminal (or connected with the notebook computer), through the GPRS network proprietary APN number, the use of GPRS backbone network and local access network to build proprietary channels, access to remote enterprise internal network. This method has the characteristic of supporting the user roaming, accessing flexibly, fast and safe, improving the work efficiency and saving the operating cost.

GPRS network GGSN (gateway), Equipment and enterprise private network at both ends through the tunnel connection, is the realization of GPRS VPN the most critical link, need the same IP address space. It should be explained that GPRS VPN is a new access method on the basis of traditional VPN technology. If the enterprise needs to support both traditional remote dial-up access and GPRS access, the enterprise router device only needs to support both the L2TP protocol and the GRE protocol.

GGSN and Enterprise private networks are hosted through the Internet or other ISP networks, and different security strategies can be used depending on the network hosting:

such as the use of GPRS network directly connected to the MPLS/ATM way to achieve the public IP network, enterprise users can rely on the network operators to achieve secure VPN service, because MPLS and ATM technology provides a better security mechanism, no need to use additional IPSec technology to ensure security.

If the security level of public IP network directly connected with GPRS network is low, IPSec tunneling encryption technology can be used to guarantee data security. IPSec technology needs to be used at the GGSN side of the enterprise and GPRS networks, and IPSec hardware acceleration technology can be used to address the concerns of enterprise users about data transmission rates if necessary.