Virtual Private Networks:

1
Virtual Private Networks

• A Very Brief and General Overview

2
Virtual Private Network (VPN)

• Connecting end users, businesses, and other
  networks securely over a public network
  infrastructure

3
Simple VPN
Branch Office
Internet
Router
Modem
Router
Main Office
Users Home
4
WAN VPN
Users Home
Branch Office
Internet
Modem
Router
Business Partner
Router
Main Office
Router
Laptop
5
VPN ACCESS

• Internet
• Hub/Spoke Topology
• Intranet
• Hub/Spoke/Full-Mesh
• Extranet
• Hub/Spoke/Partial Full-Mesh

6
VPN Technologies

• Security
• Firewall
• Encryption
• Authentication/Authorization/Access

7
VPN Technologies

• Intrusion Detection
• Tunneling
• Quality of Service
• Net Management

8
VPN Security

• Certification
• token and Personal Identification Number (PIN)
• Encryption
• private and public keys
• key management

9
VPN Protocols

• Layer 2 Protocols
• Point-to-Point Tunneling Protocol (PPTP)
• Layer 2 Forwarding (L2F)
• Layer 2 Tunneling Protocol (L2TP)

10
VPN Protocols

• Layer 3 Protocols
• -most common
• -pros cons
• -IP Security (IPSec) introduction
• Layer 4 Protocols

11
IPSec

• Authentication, Encryption, and Tunneling.
• A set of protocols and formats for negotiating
  secure communications over a public IP
  infrastructure.
• Standardized by the Internet Engineering Task
  Force (IETF).

12
Pros of IPSec

• Reliable and open standard
• Works with unsecured IP nets
• Uses public-key digital certificates for
  authentication
• Anti-replay service

13
Cons of IPSec

• Needs to be tweaked for individual vendor
  projects
• Requires computational intensities
• Cannot work with non-IP protocols
• Lack of guidelines for interface development
• Complex end-user configurations
• Limited bandwidth

14
Benefits

• Lower Costs
• Secure Data Transmission
• Scalability

15
Lower Costs for VPNs

• become cost efficient after they are up and
  running compared with the cost of remote access
  servers.
• are up to 80 cheaper than leased lines.
• reduced long distance phone charges for remote
  access.

16
(No Transcript)
17
Downside

• Possible system reconfiguration
• Lack of set standards
• Training needs

18
Future

• Growth
• Existing vs. New Innovations
• Small office
• Windows 95/98 and Windows NT
• Windows 2000
• Overriding Prediction