THE FASCINATING WORLD OF NETWORKING

Table of Contents

• GNS3 Example

• Connecting using the client

• Verifying VPN connection

VPN Overview

• A virtual private network (VPN) is as an encrypted connection between private networks over a public network

• such as the Internet.

• The word virtual in VPN refers to a logical connection between two devices. Information within a private network is transported over a public network.

• The word Private means the traffic is encrypted to keep the data confidential.

• A Virtual Private Network (VPN) provides the same network connectivity for remote users over a public infrastructure as they would have over a private network.

• VPN services or benefits for network connectivity include:

  • Authentication: ensures that only authorized senders and devices enter the network.   

  • Data integrity: guarantees that no tamperingmanipulación or alterations occur. Using hashing.

  • Data Confidentiality: Protects data against eavesdroppers (spoofing). By configuring encryption.

Types of VPN

There are two major categories into which VPNs could be placed: remote-access and site-to-site.

Site-to-Site VPNs: 

• Connects entire networks to each other.

• VPN hosts do not require VPN client software.

• VPNs send and receive normal TCP/IP traffic through a VPN “gateway” such as a Cisco ISR or an ASA.

• The VPN gateway is responsible for encapsulating and encrypting outbound traffic over the Internet to a peer VPN gateway.

• Upon receipt, the peer VPN gateway decrypts the content and relays the packet toward the target host inside its private network.

• Many Cisco devices can work together to form the VPN, including routers, firewalls, and Adaptive Security Appliances.

• You can deploy Site-to-Site IPSec VPN between routers, router and ASA, and between ASAs.

Remote Access VPNs:

• They securely connect remote users, such as mobile users and telecommuters, to the enterprise.

• In a remote-access VPN, each host typically has Cisco VPN Client software or Cisco Anyconnect.

• The client encapsulates and encrypts that traffic and sends it over the Internet to the target VPN gateway.

• The VPN gateway behaves as it does for site-to-site VPNs.

The different types of Remote Access VPNs are:

• Clientless SSL VPN (WebVPN):

  • Browser-based VPN that lets users establish a secure, remote-access VPN tunnel to the ASA/ISR using a web browser.

  • After authentication, users access a portal page and can access specific, supported internal resources.

• Client-Based SSL VPN:

  • Provides full tunnel SSL VPN connection but requires a VPN client application to be installed on the remote host.

  • Requires a client, such as the Cisco AnyConnect VPN client to be installed on the host.

• Cisco Easy VPN (IPSec Remote Access VPN):

  • Cisco Easy VPN is an IP Security (IPsec) virtual private network (VPN) solution supported by Cisco routers and security appliances.

  • It greatly simplifies VPN deployment for remote offices and mobile workers.

  • Cisco Easy VPN can be deployed in a Cisco IOS router or an ASA appliance.

  • We need a Cisco VPN client software that can be installed on an operating system.

Click Deliver to continue: