IMPLEMENTING VIRTUAL PRIVATE NETWORKS

IMPLEMENTING VIRTUAL PRIVATE NETWORKS

1. VPN

   • Benefits
     • Cost Savings
     • Security
     • Scalability
     • Compatibility
   • Topologies
     • Site-to-Site
     • Remote-Access

2. IPSec Framework

   • IPSec Protocol
     • Mode
       • Transport mode
         • Host to Host
       • Tunnel mode
         • Host to Security Gateway
         • Security Gatewat to Security Gateway
     • Protocols
       • AH
       • ESP
       • AH + ESP
   • Confidentiality
     • DES
     • 3DES
     • AES
     • SEAL
   • Integrity
     • MD5
     • SHA
   • Authentication
     • PSK
     • RSA
   • Diffie-Hellman
     • DH1, DH2, ...

3. Internet Key Exchange (IKE)

   • Phase 1
     • ISAKMP Policiy negotiation
   • Phase 2
     • IPSec Policy Negotiation

4. IPSec Negotiation

   • Steps
     • 1- ISAKMP tunnel is initiated
       • “Interesting” traffic
     • 2. IKE Phase 1 begins
       • Secure tunnel is created
     • 3. IKE Phase 2 begins
       • IPsec tunnel is established
     • 4. The IPsec tunnel is created
       • Data is transferred
     • 5. The IPsec tunnel terminates
       • The IPsec SAs are manually deleted
       • When their lifetime expires
   • Configurations Taks
     • 1. Configure the ISAKMP policy for IKE Phase 1
     • 2. Configure the IPsec Policy for IKE Phase 2
     • 3. Configure a Crypto Map for the IPsec Policy
     • 4. Apply the IPsec Policy
     • 5. Verify the IPsec Tunnel is Operational
   • Cypto Map
     • 1. Bind the ACL and the transform set to the map.
     • 2. Specify the peer’s IP address
     • 3. Configure the DH group
     • 4. Configure the IPsec tunnel lifetime

5. ISAKMP Policy

   • Hash
   • Authentication
   • Group
   • Lifetime
   • Encryption

Images and files in the map