CYS406 · Chapter 13 · Annotated SlidesVPN Fundamentals
Original
Overview

VPN Fundamentals

How a VPN works and why to use one, VPN components and concentrators, remote-access vs. site-to-site VPNs, hardware vs. software VPNs, encapsulation, encryption and authentication, VPN technologies and topologies (hub-and-spoke, point-to-point, full mesh, star), security risks, and the AAA/RADIUS setup.

How to read this page

Every original slide is shown unchanged. Yellow marks on a slide point to a numbered note: hover or tap a mark to jump to its note, and hover a note to see its marks. Questions tagged Past exam appeared on a real paper; Prediction questions are likely angles, not confirmed. Pick an answer to each question: a wrong pick tells you why it is wrong, so you can try again.

All 35 slides
  1. 1 Module Flow
  2. 2 What is a VPN?
  3. 3 How VPN Works
  4. 4 Why Establish VPN?
  5. 5 VPN Components
  6. 6 VPN Concentrators
  7. 7 Functions of a VPN Concentrator
  8. 8 Slide 8
  9. 9 Client-to-Site (Remote-access) VPNs
  10. 10 Site-to-Site VPNs
  11. 11 ❑ A dedicated hardware VPN appliance is used to connect routers and gateways to ensure communication over an insecure channel
  12. 12 Hardware VPN Products
  13. 13 Software VPNs
  14. 14 Software VPN Products
  15. 15 Selecting an Appropriate VPN
  16. 16 VPN Core Functionality: Encapsulation
  17. 17 VPN Core
  18. 18 VPN Core Functionality: Authentication
  19. 19 VPN Technologies
  20. 20 VPN Technologies (Cont’d)
  21. 21 VPN Topologies
  22. 22 Hub-and-Spoke VPN Topology
  23. 23 Point-to-Point VPN Topology
  24. 24 Full Mesh VPN Topology
  25. 25 Star Topology
  26. 26 VPN Security Risks
  27. 27 Slide 27
  28. 28 ❑ Firewalls establish a protection barrier between the VPN and the Internet
  29. 29 IPsec Server
  30. 30 AAA Server
  31. 31 Remote Access Dial-In User Service
  32. 32 Remote Access Dial-In User Service (Cont’d)
  33. 33 VPN: SSH and PPP
  34. 34 Connection to VPN: SSL and PPP
  35. 35 Connection to VPN: Concentrator
Slide 1 / 35

Module Flow

Slide 1: Module Flow
Slide 2 / 35

What is a VPN?

Slide 2: What is a VPN?
Slide 3 / 35

How VPN Works

Slide 3: How VPN Works

Notes

  1. A VPN builds an encrypted tunnel over a public network so remote users or sites act as if on the private LAN.

Slide 4 / 35

Why Establish VPN?

Slide 4: Why Establish VPN?
Slide 5 / 35

VPN Components

Slide 5: VPN Components
Slide 6 / 35

VPN Concentrators

Slide 6: VPN Concentrators
Slide 7 / 35

Functions of a VPN Concentrator

Slide 7: Functions of a VPN Concentrator
Slide 8 / 35

Slide 8

Slide 8: Slide 8
Slide 9 / 35

Client-to-Site (Remote-access) VPNs

Slide 9: Client-to-Site (Remote-access) VPNs
Slide 10 / 35

Site-to-Site VPNs

Slide 10: Site-to-Site VPNs

Exam angle

PredictionQ1

Connecting a branch office network to headquarters is a:

Slide 11 / 35

❑ A dedicated hardware VPN appliance is used to connect routers and gateways to ensure communication over an insecure channel

Slide 11: ❑ A dedicated hardware VPN appliance is used to connect routers and gateways to ensure communication over an insecure channel
Slide 12 / 35

Hardware VPN Products

Slide 12: Hardware VPN Products
Slide 13 / 35

Software VPNs

Slide 13: Software VPNs
Slide 14 / 35

Software VPN Products

Slide 14: Software VPN Products
Slide 15 / 35

Selecting an Appropriate VPN

Slide 15: Selecting an Appropriate VPN
Slide 16 / 35

VPN Core Functionality: Encapsulation

Slide 16: VPN Core Functionality: Encapsulation
Slide 17 / 35

VPN Core

Slide 17: VPN Core
Slide 18 / 35

VPN Core Functionality: Authentication

Slide 18: VPN Core Functionality: Authentication
Slide 19 / 35

VPN Technologies

Slide 19: VPN Technologies

Notes

  1. Technologies: IPsec, SSL/TLS VPNs, PPTP (obsolete), L2TP (with IPsec).

Exam angle

PredictionQ1

Which VPN protocol is considered insecure today?

Slide 20 / 35

VPN Technologies (Cont’d)

Slide 20: VPN Technologies (Cont’d)
Slide 21 / 35

VPN Topologies

Slide 21: VPN Topologies

Notes

  1. Topologies: hub-and-spoke (sites via a central hub), point-to-point, full mesh (every site to every site), star.

Exam angle

PredictionQ1

n sites in a full-mesh VPN need how many tunnels?

Slide 22 / 35

Hub-and-Spoke VPN Topology

Slide 22: Hub-and-Spoke VPN Topology
Slide 23 / 35

Point-to-Point VPN Topology

Slide 23: Point-to-Point VPN Topology
Slide 24 / 35

Full Mesh VPN Topology

Slide 24: Full Mesh VPN Topology
Slide 25 / 35

Star Topology

Slide 25: Star Topology
Slide 26 / 35

VPN Security Risks

Slide 26: VPN Security Risks

Notes

  1. Risks: weak authentication, compromised endpoints, split tunneling, outdated protocols.

Slide 27 / 35

Slide 27

Slide 27: Slide 27
Slide 28 / 35

❑ Firewalls establish a protection barrier between the VPN and the Internet

Slide 28: ❑ Firewalls establish a protection barrier between the VPN and the Internet
Slide 29 / 35

IPsec Server

Slide 29: IPsec Server
Slide 30 / 35

AAA Server

Slide 30: AAA Server
Slide 31 / 35

Remote Access Dial-In User Service

Slide 31: Remote Access Dial-In User Service
Slide 32 / 35

Remote Access Dial-In User Service (Cont’d)

Slide 32: Remote Access Dial-In User Service (Cont’d)
Slide 33 / 35

VPN: SSH and PPP

Slide 33: VPN: SSH and PPP
Slide 34 / 35

Connection to VPN: SSL and PPP

Slide 34: Connection to VPN: SSL and PPP
Slide 35 / 35

Connection to VPN: Concentrator

Slide 35: Connection to VPN: Concentrator