This topic describes the application of theEudemon 1000E in VPNs.

The Eudemon 1000E can provide the IPSec mechanism through software or hardware encryption cards to provide services such as access control, wireless connection integrity, data source authentication, anti-replay, encryption, and type-based data flow encryption for the two parties involved in communication. Through AH and ESP, the Eudemon 1000E protects IP datagrams and upper-level protocols. The Eudemon 1000E supports tunnel encapsulation modes. The security association (SA) of IPSec can be established through manual configuration or IKE auto-negotiation and supports NAT traversal. Both IKE V1 and IKE V2 are supported. IKE V2 supports EAP authentication.