VPNs: Dialling into security

Ed Engelking II, A+, TechRepublic

Managing available bandwidth via dial-up connectivity was once a relatively easy task for network administrators. Previously, most users connected to a virtual private network, or VPN, via the Internet using connections that consumed only a small amount of bandwidth. With the onset of broadband communications such as cable and DSL within SOHO environments, however, administrators now face the challenge of controlling available bandwidth on VPNs.

If your telecommuters are burning bandwidth by using broadband connectivity, how can you address this problem? Here are some solutions available to network administrators that can help limit and control the amount of bandwidth used, both inside and outside of the network.

Quality of Service for all

Improved firewalls and routers, incorporating Quality of Service (QoS), enable the limitation of bandwidth for incoming and outgoing data, which in turn increases acceptable performance for each employee outside of the office, no matter the connection speed.
In networking, Quality of Service (QoS) is a term that indicates a guaranteed bandwidth level.

With QoS integrated within a VPN, an administrator gains full control over the data flowing through the network. Two ways to maintain this control are packet classification and bandwidth management:

  • Packet classification
    Packet classification groups data by importance. The more important the data, the higher its classification, and the better handling it receives at the expense of other, less important data on the same network.
  • Bandwidth management
    By using bandwidth management, a VPN administrator can police the incoming and outgoing data from a network and allow certain amounts of bandwidth to be available for differing packet classifications.

Other forms of bandwidth control

Depending on the needs of the network administrator, there are additional ways of controlling the amount of available bandwidth:

  • Traffic shaping
    Traffic shaping comes into play when a service provider detects Internet traffic congestion. The amount of incoming and outgoing data streams is then lowered via queuing. This causes the bandwidth in use to fall below the allowed allocation.
  • Fair bandwidth
    Fair bandwidth allows all users on a network to obtain equal access to Internet bandwidth. With fair bandwidth enabled, applications using large amounts of a data stream, such as MP3s, will have their bandwidth decreased in order to provide fair access to other employees.
  • Guaranteed delivery
    Guaranteed delivery reserves a section of bandwidth for specific services within a network, such as video teleconferencing, voiceover IP, and money transactions. It determines which services are high priority and allocates bandwidth accordingly.
TechRepublic is featuring a series of articles on this topic in every Republic this month. If you'd like more information on security or productivity issues relating to VPNs, click here.

Controlling bandwidth will continue to challenge administrators

Network administrators must control virtual private networking and the resources that are required for it to operate successfully in an organization. Because telecommuters and remote offices are here to stay, VPN administrators will continue to have issues with maintaining bandwidth. However, the incorporation of new technologies intended to supplement QoS will help network administrators manage this problem.

Article resources

The following resources were used in the creation of this article:

TechRepublic is the online community and information resource for all IT professionals, from support staff to executives. We offer in-depth technical articles written for IT professionals by IT professionals. In addition to articles on everything from Windows to e-mail to fire walls, we offer IT industry analysis, downloads, management tips, discussion forums, and e-newsletters.

© 2001 TechRepublic, Inc.

Advertisement

Talkback 0 comments

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Renai LeMay How reliable is IP telephony?
    Have you ever heard a weird kind of hissing, crackling or popping noise when calling someone on an IP telephony line? How rare is the phenomenon these days?
  • Array Forget the NBN, 100Mbps is already here
    Telstra and TransACT will shortly begin offering 100Mbps broadband to many customers. By moving early, the companies have not only raised the bar for Australia's broadband services, but thrown down a challenge to a government that now faces increased pressure to deliver the NBN as promised.
  • Array IT: Govt's cost-cutting bitch
    The government needs to stop looking at IT as a necessary evil or the place to remove costs when the Treasurer comes calling.
  • More blogs »

Tags

Back to top

Featured