Client-Initiated Scenario (Mobile Working Users Accessing the Enterprise Intranet)

With the popularization of IP networks, few users access the Internet through dialup, and more and more users access the Internet through Ethernet. As the access mode changes, the mode in which mobile employees access intranet resources changes. As shown in Figure 1, mobile users (mobile employees) access the Internet through Ethernet. The LNS serves as the egress gateway of the enterprise headquarters. Mobile users can use the VPN software on their mobile devices to directly establish an L2TP VPN tunnel with the LNS. No independent NAS needs to be deployed. The PPP packets sent by mobile users to access the intranet reach the LNS over the L2TP VPN tunnel. In this scenario, users can access intranet resources anywhere, increasing the flexibility of mobile working.