Prerequisites for the Vyatta NOS RA VPN solution
A brief overview of the technical specification of the Vyatta NOS RA VPN solution and some other solution components that you need to make the overall use case work.
Technical data sheet for RA VPN
- Total maximum supported tunnels (= IPsec SAs): 1000
- IKEv2 authentication methods: X.509, with OCSP/CRL support
- Policy-based VPN
- ESP with Tunnel Mode
- Native NAT support: UDP encapsulation of ESP traffic
- VFP support: Apply firewall/QoS/NAT on the overlay network
Solution requirements
- Public key infrastructure, including OCSP responder or CRL hosted on a HTTP server (recommended)
- Root certificate(s) of the certificate authority that issued the VPN client certificates
- Root certificate(s) of the certificate authority that issued the end-entity certificate of the server
- End-entity certificate issued by the certificate authority for the IPsec RA VPN server
- IKEv2
- Dead-peer-detection (DPD)