SKUDONET Load Balancer can be used to create a virtual private network (VPN). A VPN allows users to connect to a network securely, even if they are not physically connected to it. SKUDONET Load Balancer supports a variety of VPN encryption methods, including AES-256, blowfish-256, and camellia-256. It also supports a variety of VPN authentication methods, including MD5, SHA-1, and SHA-256. SKUDONET Load Balancer also supports market standard VPN protocols, such as L2TP/IPsec, IKEv1, and IKEv2.
Users can create a variety of VPN profiles on SKUDONET Load Balancer, depending on their needs. The three supported VPN profiles are:
- ZSS: This type of VPN connects two networks together. It can be used to connect clients to a load balancer, or to connect a load balancer to real servers. SKUDONET will act as the default gateway for each local and remote subnet. ZSS uses IPsec encryption.
- ZTN: This type of VPN creates a tunnel between two networks. It can be used to connect clients to a load balancer, or to connect a load balancer to real servers. SKUDONET will act as the default gateway for each local and remote subnet. ZTN uses a GRE tunnel over IPsec encryption.
- ZRS: This type of VPN allows clients to connect to a VPN server. SKUDONET will act as the VPN server and assign the client a dynamic IP address. The dynamic IP address will be routed to the destination network through the routing system. ZRS uses IPsec encryption in server mode for clients in road warrior mode.
The image below shows the table of VPN networks and their properties.
Here is a short explanation of what each column in the table means.
Name: A unique name for the VPN profile.
Profile: The type of VPN to use, such as site-to-site or remote access.
Local: The IP address of the local server, if configured. Supports both IPv4 and IPv6.
Local net: The subnet mask of the local server, if configured. This netmask must be configured when you set up the IP of the local server.
Remote: The IP address of the remote server, if configured. Supports both IPv4 and IPv6.
Remote net: The subnet mask of the remote server, if configured. This netmask must be configured when you set up the IP of the remote server.
Status: The health status of the VPN. The following colors are used to indicate the status of a VPN:
- Green: The VPN is up and running.
- Red: The VPN is down and not running.
Actions: These are the things you can do to manage a selected VPN profile.
- Create VPN: This allows you to create a new VPN profile.
- Restart: This restarts a VPN profile if it is slow or not responding.
- Start: This activates a VPN profile and allows packets to flow through the associated IP address.
- Stop: This deactivates a VPN profile and prevents it from accepting packets.
- Delete: This removes a VPN profile from the table list and its associated configurations.