Implementing Virtual Private Networks

Implementing Virtual Private Networks

1. VPN

   • Benefits
     • Cost Savings
     • Security
     • Compatibility
     • Scalability
   • Layer 3
     • A VPN connects two endpoints
       • Central Site
       • Mobile user
       • Branch office
       • SOHO
     • point-to-point
     • GRE
       • is a tunneling protocol developed by Cisco
     • IPsec
       • is a suite of protocols
   • Topologies
     • remote-access
     • site-to-site

2. IPsec VPN

   • IPsec
     • Integrity
       • hashing algorithms
     • Authentication
       • Internet Key Exchange
     • Confidentiality
       • encryption
     • Secure key exchange
       • Diffie-Hellman
     • is an IETF standard (RFC 2401-2412)
   • Internet Key Exchange
   • Protocol
     • AH, ESP and ESP+AH

3. Site-to-site IPsec VPN with CLI

   • ISAKMP Policy
     • show crypto isakmp default policy
     • HAGLE
     • show crypto isakmp policy
   • Configuring
     • task
     • topology
     • Negotiation
       • 5 steps
     • ACL
     • Broadcast and multicast
   • IPsec Policy
     • Transform Set
     • Define Interesting Traffic
   • Crypto Map
     • crypto ipsec transform-set

Imágenes y archivos del mapa