VPN on NPE series industrial computers

A Virtual Private Network is a safe tunnel used to send encrypted data between distant local networks or users in the virtual private network through a public network – mainly the internet.

VPN makes it possible to integrate devices in different networks into one virtual subnet. In widely developed VPN networks, it is possible to connect many tunnels with each other. Using VPN gives the capability of communication between clients as though they were in one local network. The NPE Platform has been expanded by VPN connection support.

There are four types of connections in VPN technology:

• IPSec,
• SSL VPN,
• MPLS,
• OpenVPN.

NPE uses the OpenVPN tunneling mechanism in order to realize the connection of different Ethernet networks into one global network. The NPE platform makes it possible to connect with VPN networks using such network interfaces as:

• WiFi,
• GPRS/EDGE,
• Ethernet.

NPE may play the role of a VPN server as well as of a VPN client. This makes it possible to create expansive VPN networks based on NPE and on other devices that have Internet connection capability.

In order to facilitate the use of VPN by the user, additional application management tools are given with the OpenVPN program in NPE. These tools make it possible to make a connection, disconnect, and reconnect with clients or a server and enable the construction of bridges between VPN networks.

In addition, the OpenVPN packet makes it possible to generate and authenticate users in the VPN network using RSA certificates, which increases the security of network traffic.

Advantages:

• Secure distribution of information (data encryption, authentication, tunneling, certificates).
• Flexibility and availability – access from anywhere e.g. through cell phones, PDAs, and notebooks using an internet connection.
• Low costs – an alternative for expensive leased networks.

• In companies where employees work from remote locations or are mobile, or in companies where divisions are found at great distances from one another.
• In financial institutions that require constant exchanging of data with the central information system of the bank
• Distributed systems in which data security is one of the most important criteria (e.g. ATM systems).
• Remote supervision systems for key mediums of transmission (supervision of train operation).

See iMod series devices