Implementing Virtual Private Networks

Implementing Virtual Private Networks

1. VPNs

   • Benefits
     • Cost Savings
     • Security
     • Scalability
     • Compatibility
   • Communications environment
     • Connects two endpoints
   • Layer 3
     • Examples
       • Point-to-point connections
         • GRE
         • IPsec
           • Allow
             • Authentication
             • Integrity
             • Access Control
             • Confidentiality
       • Any-to-any connectivity
         • MPLS
   • Types
     • Remote-access
     • Site-to-site

2. IPsec

   • Protects and authenticates IP packets
     • Between source and destination
   • Flexibility framework
   • Implementation examples
     • Security Associations (SAs)
       • Basic building block
   • Confidentiality
     • Encryption Algorithms
       • DES
       • 3DES
       • AES
       • SEAL
   • Integrity
     • HMAC
       • MD5
       • SHA
   • Authentication Methods
     • PSK
     • RSA

3. Site-to-Site IPsec VPN

   • IPsec Negotiation
   • IPsec VPN
     • Security Policy
       • Encrypt traffic
       • Authenticate PSK
       • Exchange keys
     • Configuration
       • ACL
       • Tasks
   • ISAKMP Policies
     • Pre-Shared Key
     • HAGLE
     • SAs
       • Hash
         • is SHA
       • Authentication
         • is pre-shared key
       • Group
         • is 24
       • Lifetime
         • is 3600 seconds
       • Encryption
         • is AES
   • Crypto Map

Bilder und Dateien der Mindmap