Functionality

Internet Acces – IP Solution RAS

The IP Solution RAS allows Internet access to the enterprise network created within the IP Solution service. Network access is provided by software or by a network device (an IP router) allowing to set up an encrypted IPSec communication session between the given location and the enterprise network.

Service access is protected by appropriate technical means provided by GTS. It is also possible to cooperate with access protection systems used by the customers.

The GTS network node, located in the Internet under a specified IP address, is the Service Access Point. The AAA server is used for user authentication. It is a process that provides service access to authorized persons only. Authentication can apply dynamic passwords based on Secure ID technology.

The server is maintained and managed by GTS. Users communicate wit each other through the Central Point (IPSec concentrator). Encryption is based on a 168-bit key (3DES) that allows to create very secure IPSec tunnels in the Internet.

A special application, made available as standard to IT professionals of the company, is an essential element of the service. It allows to manage user accounts from out of the office. Thus, GTS provides its customers with the possibility of an additional system control.

Dial-up Access – IP Solution Dial-up

Dial up service is intended for branches or mobile employees who do not require continuous data transmission in the WAN. It enables to set up connections with the IPVPN of the customer through the TP SA PSTN or the GTS phone network. The access is made available through the countrywide phone number and the fees are based on competitive, geographically uniform rates.

Settlements on a toll-free line basis are an additional advantage of the Dial-up Service: it’s the company, as the owner of the number, who pays for the calls. The user benefits from free-of-charge access to the company network. This advantage allows to avoid tedious re-invoicing the fees for enterprise network connections in case of remote employees.

Figure. Scheme of dial-up access to the VPN.

Each user is granted an account allowing him/her to set up IP VPN connections.
Within the service, GTS provides a Web interface for account administration (creation, removal, modification of parameters).

Account administration operations can also be executed by GTS for additional fee.
In order to mitigate the risk of unathorized access, the user is authenticated in the authorization process while making his/her call. One of the following three authorization methods can be selected for each user account:

• the „Standard” method – authorization with a dynamic password and the Secure ID technology,
• the “SOHO” method – authorization based on the number of the calling user and on the password permanently attributed to the user account,
• the “Simple” method – authorization method based on the password permanently attributed to the user account.

The “Simple” and “Standard” methods are intended for those users who connect to the IPVPN using a PC equipped with an analog modem or an ISDN adapter.

In case of the SOHO authorization method, intended for small offices, it’s the access router from the office that initiates the phone call.

The device connects to the IPVPN whenever an office PC requires the access and afterwards it automatically ends the connection in order to avoid unnecessary charges. GTS offers a possibility of leasing subscriber routers on a subscription fee basis.

Access through the mobile network- Mobile Solution

Mobile Solution is a service which ensures remote access to IP Solution VPNs using the mobile infrastructure through modem connected with PC. Mobile Solution Branch it is a remote access to IP Solution VPNs through router with the implemented modem.

Mobile Solution and Mobile Solution Branch allow for mobile access to the IP Solution virtual private network resources and applications, so the Customer does not need to have a fixed and always-on Internet access. The Mobile Solution service offers the Customers the possibility to use business applications in the virtual private networks almost all over the country, anytime and anywhere; only mobile network coverage.

Mobile Solution:

• Wireless and unlimited VPN access through the mobile network
• Choice of many mobile data transmission technologies (GPRS, EDGE, UMTS, HSDPA)
• Automatic selection of the fastest possible transmission technology available at a given site
• Data transfer speeds up to 7.2 Mbps using HSDPA standard
• Increased security: dedicated, separate mobile subnetwork (APN) with direct interface to VPN in MPLS network
• High monthly data transfer limits
• Attractive offer for recommended GPRS modems

* Maximum bandwidth as specified by HSDPA standard. Actual available bandwidth depends on the transmission conditions for the mobile network radio channel.