Using VPN in AIN

When you encrypt voice data in the AIN, it is encrypted within the LAN but not necessarily on WAN links. If a connection runs for example to a remote IP system phone via various internet providers, the voice data on the internet is not automatically encrypted. To encrypt the entire link you also need to set up a VPN (Virtual Private Network) for WAN links.

A VPN provides a secure passage through the internet from one point to the next (e.g. from the Master to the IP system phone or to the satellite) and is therefore particularly well suited for WAN links over the internet. The IP packets to be transmitted are encoded and repackaged in IP packets (tunnelling). The most frequently used VPN protocols are IPsec and SSL.

A simple VPN links only two terminals or sites with each other. The internet provider's VPN services can be used to link several terminals or sites together via VPN. If using VPN in the AIN we recommend that whenever possible you work with a single internet provider who supports VPN routing and is able to cover all the locations. On the one hand this saves bandwidth resources and on the other it simplies the routing configuration.