| Learn about IPSec protocols & Cisco IOS IPSec packet processing. Understand the differences between IPSec tunnel mode & transport mode. Evaluate the IPSec features that improve VPN scalability & fault tolerance, such as dead peer detection & control plane keepalives. Overcome the challenges of working with NAT & PMTUD. Explore IPSec remote-access features, including extended authentication, mode-configuration, and digital certificates. Examine the pros & cons of various IPSec connection models such as native IPSec, GRE, and remote access. Apply fault tolerance methods to IPSec VPN designs.
Employ mechanisms to alleviate the configuration complexity of a large-scale IPSec VPN, including Tunnel End-Point Discovery (TED) & Dynamic Multipoint VPNs (DMVPN). Add services to IPSec VPNs, including voice & multicast. Understand how network-based VPNs operate and how to integrate IPSec VPNs with MPLS VPNs. Among the many functions that networking technologies permit is the ability for organizations to securely communicate with branch offices, mobile users, telecommuters, and business partners.
Although several technologies exist that can enable interconnectivity among business sites, Internet-based virtual private networks (VPNs) have evolved as the most effective means to link corporate network resources to remote employees, offices, and mobile workers. VPNs provide productivity enhancements, efficient remote access to network resources, site-to-site connectivity, a high level of security, and tremendous cost savings. IPSec VPN Design is the first book to present a detailed examination of the design aspects of IPSec protocols that enable secure VPN communication. The book provides a solid understanding of design and architectural issues of large-scale, secure VPN solutions. | |