Summary of Computer Networking: Exam Review and Concepts
Computer Networking: Exam Review and Concepts - Your Study Guide
Introduction
VPN (Virtual Private Network) is a technology that creates a secure "virtual" connection over a public network, such as the internet. This material will explain the basic types of VPNs, when they are used, and will show practical examples to help understand the differences between them.
Definition: A VPN is a private network created over a public infrastructure, which ensures the confidentiality and integrity of transmitted data.
Overview of Basic Concepts
What is "remote access" VPN?
- Connects individual users to an organization's network.
- Users typically use a VPN client or a web browser to connect.
Definition: A remote access VPN allows individuals to securely connect to corporate resources from any location.
Examples:
- A mobile sales representative connecting via hotel Wi-Fi.
- An employee working from home with a VPN client on their laptop.
What is "site-to-site" VPN?
- Connects entire networks (e.g., branch offices, headquarters) to each other.
- They are typically "always on" and managed at the gateway level between sites.
Definition: A site-to-site VPN creates a permanent, secure connection between two networks using VPN gateways.
Examples:
- A small branch office with a Cisco ASA device establishing a permanent connection to headquarters.
- Two companies after a merger connecting their networks via a site-to-site VPN instead of expensive leased lines.
Types of VPNs and Their Characteristics
| VPN Type | Use Case | Multicast/Broadcast Support | Best For |
|---|---|---|---|
| Remote Access (SSL/TLS or client-based IPsec) | Individuals (laptops, mobile devices) | No (typically unicast) | Mobile users, easy deployment |
| Site-to-Site IPsec | Connecting networks | Mostly unicast | Permanent connections between branches |
| GRE over IPsec | Connecting networks, with multicast support | Yes | Where routing protocols or multicast are needed |
| DMVPN (Dynamic Multipoint VPN) | Flexible branch interconnections | Yes (via GRE) | Hub-and-spoke with full mesh capability |
| MPLS VPN | Provider-managed solution through the provider's core | Yes | Traffic separation for multiple customers |
How Common Scenarios Work (Practical Examples)
- Educational Example: A teacher works from home and needs to access the school server. They install a VPN client and establish a remote access connection.
- Corporate Example: A company has a headquarters and 10 branch offices. To connect them, it uses site-to-site IPsec or DMVPN so that the branches can communicate securely with each other.
- Specialized Case: A company needs multicast or routing protocols over VPN — it uses GRE over IPsec because a regular IPsec tunnel does not support multicast.
Specific Solution Details
SSL/TLS VPN (often referred to as SSL VPNs, or AnyConnect in the Cisco ecosystem)
- It uses TLS (the successor to SSL) to secure the session.
- Advantage: Often works directly through a standard web browser (reducing the need for client software installation).
- Disadvantage: Doesn't always support full-fledged network protocols (e.g., limited multicast support).
Definition: An SSL VPN utilizes Transport Layer Security (TLS) to secure the connection between a client and the VPN gateway.
Practical Note: If the host doesn't have the AnyConnect client pre-installed, the user can download it via a clientless SSL connection using a compatible browser.
IPsec VPN and VTI (Virtual Tunnel Interface)
- IPsec provides strong encryption and authentication for VPNs.
- VTI allows IPsec to be managed through a virtual interface, which simplifies routing and supports multicast without needing GRE.
Definition: An IPsec VTI is a virtual interface to which IPsec is applied, thereby facilitating the routing of encrypted traffic.
GRE over IPsec
- GRE provides support for multicast, broadcast, and various network protocols.
- IPsec then secures the GRE tunnel through encryption and authentication.
Defini
Sign up for the full summaryAlready have an account? Sign in
VPN Fundamentals
Klíčové pojmy: VPN creates a secure virtual connection over a public network., Remote access VPN connects individual users via a client or browser., Site-to-site VPN permanently connects entire networks between locations., SSL/TLS (SSL VPN) is suitable for simple browser-based deployment., GRE over IPsec allows the transmission of multicast and routing protocols over an encrypted tunnel., DMVPN enables hub-and-spoke with dynamic full mesh connectivity between branches., IPsec VTI provides a routable interface with encryption without the need for GRE., MPLS VPN is a provider solution for isolated paths within the network core., If the AnyConnect client is not installed, it will be downloaded via clientless SSL in the browser., Site-to-site VPN is more cost-effective than leased lines for connecting two networks., Choose the VPN type based on your needs: multicast, ease of deployment, or scalability.