Projet 2b
Consultation 2017/22: Projets d'ordonnances pour la mise en œuvre de la nouvelle loi fédérale sur la surveillance de la correspondance par poste et télécommunication · 34 pages
Fedlex · Projet · Page 16Fedlex · Projet
The PTSS acquires the VPN servers. The PTSS is responsible for the connection between the delivery network provider (FOITT) and the LEMF. The VPN keys and certificates are managed and assigned by the PTSS as the CA. The PTSS defines the IP addressing plan which is mandatory. The PTSS publishes an informative guideline called OpenVPN Handbook which provides details to the CSPs on how to implement the VPN access.
The CSPs can use Internet upstream, private or public peering with the FOITT. In order to reduce the risk of interruption, the delivery from the CSP shall provide as much redundancy as possible.
The CSP is responsible for its Internet accesses and for the correct operations of the VPN client. The VPN tunnel is the joint responsibility of the CSP and the PTSS. The PTSS is responsible for the correct operations of the VPN server. Problems shall be dealt with in accordance with the error handling process (see Section 12).
8.2.1.1 VPN tunnel CSP - LEMF
One or more VPN tunnels are configured between the CSP and the LEMF.
8.2.1.2 Overview
OpenVPN OpenVPN
OpenVPN Tunnel
Client server CSP PTSS Internet Exchange FOITT
Peering (BIT)
Upstream
Provider