H3C Technologies H3C Intelligent Management Center - Manual (Page 25)

7
VPN access
UAM supports these VPN access methods:
• L2TP
• IPsec+L2TP
Application scenarios
• Branches need to access the internal network of the headquarters.
• Mobile employees need to access the internal network of the headquarters.
• Partners need to access some internal network resources of the headquarters.
Figure 4 Network diagram of VPN access
Features
VPN access has the following features:
• UAM serves as the RADIUS server to authenticate user identities.
• The L2TP VPN gateway controls user access to the Intranet.
• The L2TP VPN gateway grants user access rights to resources according to the access control
policies assigned by UAM.
MAC authentication
Application scenarios
MAC authentication, shown in Figure 5 , is typically used to authenticate mute terminals. A mute terminal
refers to a network terminal without an authentication interface, such as an IP phone or a printer.