Virtual Private Networks: Technologies and Solutionsby Ruixi Yuan, W. Timothy Strayer
Pub. Date: 04/20/2001
Virtual private networks have become an essential part of today's business networks, as they provide a cost-effective means of assuring private internal and external communications over the shared Internet infrastructure. Virtual Private Networks: Technologies and Solutions is a comprehensive, practical guide to VPNs. This book presents the/i>/b>
Virtual private networks have become an essential part of today's business networks, as they provide a cost-effective means of assuring private internal and external communications over the shared Internet infrastructure. Virtual Private Networks: Technologies and Solutions is a comprehensive, practical guide to VPNs. This book presents the various technology components, concrete solutions, and best practices you need to deploy and manage a highly successful VPN.
Readers will find an overview of fundamental VPN concepts and architectures, followed by an in-depth examination of advanced features and functions such as tunneling, authentication, access control, VPN gateways, VPN clients, and VPN network and service management. Specific topics covered include:
- IPsec, featuring the Authentication Header, Encapsulating Security Payload, Internet Key
- Exchange, and implementation details
- PPTP, L2F, L2TP, and MPLS as VPN tunneling protocols
- Two-party and three-party authentication, including RADIUS and Kerberos
- Public key infrastructure (PKI) and its integration into VPN solutions
- Access control policies, mechanisms, and management, and their application to VPNs
- VPN gateway functions, including site-to-site intranet, remote access, and extranet
- Gateway configuration, provisioning, monitoring, and accounting
- Gateway interaction with firewalls and routers
- VPN client implementation issues, including interaction with operating systems
- Client operation issues, including working with NAT, DNS, and link MTU limits
- VPN management architectures and tunnel and security management
- Outsourcing and service provider environments
The book concludes with a forward look at the future of VPNs that examines such issues as security and quality of service (QoS). VPN scenarios throughout the book demonstrate how to put the described techniques and technologies to work in a real-world Virtual Private Network.
Table of Contents
I. VPN FUNDAMENTALS.
The VPN Market.
2. Basic Concepts.
A Brief History of the Internet.
ISO OSI Reference Model.
The Need for Security.
Shared Key Cryptography.
Public Key Cryptography.
Message Authentication Codes.
3. VPN Architectures.
Site-to-Site Intranet VPNs.
Remote Access VPNs.
A Security Services Taxonomy.
II. VPN TECHNOLOGIES.
Data Integrity and Confidentiality.
VPN Tunneling Protocols.
Basic IPsec Concepts.
IPsec and VPNs.
Encapsulating Security Payload.
Internet Key Exchange.
Phase 1 Negotiation.
Phase 2 Negotiation.
Key Generation in IKE.
Inbound Packet Processing.
Outbound Packet Processing.
S/KEY and OTP.
Trusted Third-Party Authentication.
X.509 Public Key Infrastructure.
Pretty Good Privacy Trust Model.
Authentication in VPNs.
7. Public Key Infrastructure.
Digital Certificate Formats.
X.509 Digital Certificate.
PKCS #6, Extended-Certificate Syntax Standard.
X.509 Attribute Certificate.
Certificate Management System.
Certificate and CRL Repository.
Certificate Use in VPNs.
8. Access Control.
Access Control Policy.
Attributes and Conditions.
Access Control Rules.
Access Control Mechanisms.
Access Control Lists.
Access Control Policy Management.
Distributed Policy Management.
Centralized Policy Management.
Access Control in VPNs.
III. VPN SOLUTIONS.
9. VPN Gateways.
VPN Gateway Functions.
Site-to-Site Intranet VPN Functions.
Remote Access VPN Functions.
Extranet VPN Functions.
Forwarding, Routing, and Filtering Functions.
Gateway Configuration and Provisioning.
Gateway Identity Information.
External Device Information.
Security Policy Information.
Interaction with Firewalls.
VPN Gateway and Firewall in Parallel.
VPN Gateway and Firewall in Series.
VPN Design Issues.
A VPN Solution Scenario.
10. VPN Clients.
VPN Client Functions.
Operating System Issues.
Other Operating Systems.
Working with the Corporate Firewall.
Working with Network Address Translation.
Fragmentation and MTU Issues.
Private and Public Domain Name Servers.
WINS Server Issues.
VPN Clients for Windows.
Layer 2 Clients.
L2TP/IPsec Combination Clients.
VPN Client Software Installation.
VPN Clients for Other Platforms.
Layer 2 Implementations.
Alternative VPN Clients.
SSH as VPN Client.
SOCKS and SSL as VPN Client.
A Remote Access VPN Scenario.
11. VPN Network and Service Management.
Network Management Standards.
Network Management Architecture.
Network Management Station.
Network Management Protocol.
6 Other Means of Management.
VPN Management in a Service Provider Environment.
Secure Management Tunnel in VPN.
Out-of-Band Access for Management.
Service Level Agreement.
Network Operations Center.
12. VPN Directions: Beyond Connectivity.
Evolutions in Network Infrastructure.
Evolutions in VPNs.
Internetworking Beyond Connectivity.
Quality of Service.
Intelligence in the Network.
and post it to your social network
Most Helpful Customer Reviews
See all customer reviews >