WAN Module

Rather than being all-inclusive of potential WAN designs, this module shows resilience and security for WAN termination. Using Frame Relay encapsulation, traffic is routed between remote sites and the central site.

Key Devices

  • IOS router— using routing, access-control, QoS mechanisms

Figure B-24. WAN Module: Detail

Threats Mitigated

  • IP spoofing— mitigated through L3 filtering

  • Unauthorized access— simple access control on the router can limit the types of protocols to which branches have access

Figure B-25. Attack Mitigation Roles for WAN Module

Design Guidelines

The resilience is provided by the dual connection from the service provider, ...

Get Network Security Principles and Practices now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.