VPNS

VIRTUAL PRIVATE NETWORK (VPN)

TUNNELLING
PROTOCOLS
Involves establishing and maintaining a logical network
connection (that may contain intermediate hops).
Packets are constructed in a specific VPN protocol format
are encapsulated (encrypted) with standard carrier protocol
(e.g. TCP\IP).
Packets are transmitted between VPN client and server, and
finally de-encapsulated(decrypted) on the receiving side.



IPSEC ENCRYPTION
A collection of multiple related protocols.
Supports the secure exchange of packets
at the network level of the OSI model.

Types of IPsec
Transport mode encrypts only the data portion (payload) of each packet, but
leaves the header untouched
Tunnel mode encrypts both the header and the payload.

Both require
1. An IPSec-compliant device decrypts each packet.
2. Both sending and receiving devices must share a public key.
VPN GATEWAY
A connection point that connects two LANs that connected by a
nonsecure network such as the Internet.
VPN CLIENT\ SERVER
SOFTWARE
Software used to establish connections and mange the
running of a VPN.
VPN clients can access network resources securely from the
VPN server.