Scribd Logo
Upload

Welcome to Scribd!

  • 102 views

    Modul9 VPN

    Uploaded by

    Dadang Abdurochman
    Virtual Private Network (VPN) allows two or more groups to securely communicate over a public network by creating a tunnel between them. There are several types of VPN including remote access VPNs that allow remote users to securely connect to a private network, and site-to-site VPNs that connect two or more office locations securely. VPNs use technologies like IPSec, SSL, and SSH to encrypt data in transit and authenticate users to maintain privacy and security over insecure networks.

    Copyright:

    © All Rights Reserved
    Download as PPT, PDF, TXT or read online from Scribd

    Modul9 VPN

    Uploaded by

    Dadang Abdurochman
    102 views34 pages
    Virtual Private Network (VPN) allows two or more groups to securely communicate over a public network by creating a tunnel between them. There are several types of VPN including remote access VPNs that allow remote users to securely connect to a private network, and site-to-site VPNs that connect two or more office locations securely. VPNs use technologies like IPSec, SSL, and SSH to encrypt data in transit and authenticate users to maintain privacy and security over insecure networks.

    Original Description:

    vpn

    Copyright

    © © All Rights Reserved

    Available Formats

    PPT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Virtual Private Network (VPN) allows two or more groups to securely communicate over a public network by creating a tunnel between them. There are several types of VPN including remote access VPNs that allow remote users to securely connect to a private network, and site-to-site VPNs that connect two or more office locations securely. VPNs use technologies like IPSec, SSL, and SSH to encrypt data in transit and authenticate users to maintain privacy and security over insecure networks.

    Copyright:

    © All Rights Reserved
    Download as PPT, PDF, TXT or read online from Scribd
    Download as ppt, pdf, or txt
    102 views34 pages

    Modul9 VPN

    Uploaded by

    Dadang Abdurochman
    Virtual Private Network (VPN) allows two or more groups to securely communicate over a public network by creating a tunnel between them. There are several types of VPN including remote access VPNs that allow remote users to securely connect to a private network, and site-to-site VPNs that connect two or more office locations securely. VPNs use technologies like IPSec, SSL, and SSH to encrypt data in transit and authenticate users to maintain privacy and security over insecure networks.

    Copyright:

    © All Rights Reserved
    Download as PPT, PDF, TXT or read online from Scribd
    Download as ppt, pdf, or txt
    of 34

    Virtual Private Network

    Tools Tools Security


    Packet filtering Nama lain firewall, bekerja dengan
    menolak paket-paket TCP/IP dari jaringan luar
    berdasarkan nomor IP dan akses layanan.
    Network Address Translation (NAT) mengubah dan
    menyamarkan alamat IP internal dari jaringan luar
    Proxy services digunakan sebagai perantara untuk
    melakukan permintaan dari dan ke internet. Dapat
    digunakan untuk mengatur policy user dan content
    filtering.
    Otentikasi server memungkinkan user untuk
    memisahkan antara layanan dan otentikasi server.
    User harus mendapat tiket dari otentikasi server
    sebelum memperoleh akses dari server, cth : NIS,
    Kerberos, dll

    Definisi VPN
    Dua grup atau lebih ingin berkomenikasi
    secara aman lewat jaringan public
    VPNs bekerja pada Network layer
    Metode untuk menggunakan komunikasi
    privat yang aman lewat jaringan publik
    lewat tunneling

    Kapan VPN dipakai ?


    Biasanya diterapkan pada lokasi yg
    terpisah secara geografis
    Menggunakan tunneling dan software,
    komputer terkoneksi secara logis ke
    jaringan yang tidak terkoneksi secara fisik

    Why Use a VPN?


    Originally designed as inexpensive
    alternative WAN over leased lines
    Now mostly used to securely connect
    computers over the internet
    Convenient
    Lots of cheap and convenient protocols
    are insecure (IP, 802.11, etc)
    Can now communicate securely over these
    insecure protocols

    Sidebar: What is tunneling?


    Putting one type of packet inside another
    Both parties must be aware of tunnel for it
    to work
    Example in next slide - AppleTalk over IP
    Tunnel

    Example: AppleTalk over IP Tunnel

    Tipe VPN
    Berbasis hardware
    Standalone/Software-based
    Gabungan keduanya

    Jenis VPN
    Remote-Access
    Site-to-Site

    What is a VPN? (cont)


    Remote-Access
    The typical example of this is a dial-up
    connection from home or for a mobile worker,
    who needs to connect to secure materials
    remotely

    Site-to-Site
    The typical example of this is a company that
    has offices in two different geographical
    locations, and wants to have a secure
    network connection between the two

    Remote-Access Example

    Site-to-Site Example

    Why Use a VPN? (cont)


    Example it can simplify security

    (what is about to be proposed is not the most secure thing in the world so dont raise
    your hands and tell how you would make it more secure its just an example)

    Assume simple security policy with IP based access


    management for example, an FTP server with sitelicensed software on it for employees
    Before VPN, complicated to allow access to FTP site
    for telecommuters or traveling employees
    Train all employees to use SSH tunnel, etc
    After VPN, employees offsite can still connect using
    an internal IP address

    VPN Disadvantages

    Time Consuming Setup


    Possibly Frustrating Troubleshooting
    Interoperability with other Networks/VPNs
    Small performance overhead
    Should be negligible on todays hardware

    VPN Security
    In academic terms, VPN can provide
    Confidentiality, Integrity, and Authenticity
    Security against determined hacker (read:
    academic attacks) depends largely upon
    underlying protocols used
    Assuming security of SSH, IPSec, or other
    protocol used, should be secure

    How are VPNs set up? (cont)


    The following is not an exhaustive list
    Gateway to gateway
    Using two VPN aware Gateways

    End host to gateway


    End host uses VPN Software

    End host to concentrator

    How are VPNs set up? (cont)

    SSH over PPP


    SSL over PPP
    Concentrator using IPSec
    IPSec
    PP2TP
    L2TP
    dll

    VPN via SSH & PPP


    Point-to-Point Protocol over a Secure
    Shell connection
    Establishing a Network Connection
    Establish an SSH connection
    VPN Client VPN Server

    Each have PPP daemons that will


    communicate through the SSH connection
    Viola! A VPN CONNECTION!

    Dengan skrip vpn-pppssh,


    didapatkan gabungan ppp dan ssh

    VPN via SSL & PPP


    Point-to-Point Protocol over a Secure
    Socket Layer connection
    Secure Socket Layer
    Built-in support for Host Authentication
    Certificates

    VPN via SSL & PPP (cont)


    Establishing a Network Connection
    Initial Handshake for secure communication
    Hello messages establish:
    SSL Version, support for Cipher suites, and some
    random data

    Key is determined separately from handshake


    SSL Connection Complete!
    Data transferred over the link

    OpenVPN
    Berjalan pada Linux, Windows 2000/XP
    and higher, OpenBSD, FreeBSD, NetBSD,
    Mac OS X, and Solaris.
    Tidak kompatibel dengan IPSec, L2TP, or
    PPTP

    VPN via Concentrator


    What is a Concentrator?
    Concentrator is NOT a gateway or firewall
    Specialized device that accepts connections
    from VPN peers
    Authenticates clients
    Enforces VPN security policies
    Takes overhead of VPN management and
    encryption off of gateways and local hosts

    VPN via Concentrator (cont)


    Steps to Establish VPN
    Set up Concentrator (add users, specify
    authentication mechanisms, set IP address
    ranges, etc)
    Install client software
    Client runs software when wants to be on
    VPN

    Intro to IPSec
    Created to add Authentication,
    Confidentiality, and Integrity to IP traffic
    IPSec is large and implementation is
    complicated
    Implementation example :
    OpenS/WAN
    FreeS/WAN

    Intro to IPSec (cont)


    IP Sec VPN
    IP Sec is a protocol used in many VPNs

    Two main modes


    Transport
    Tunnel

    Two main services


    AH (Authentication Header protocol)
    ESP (Encapsulating Security Protocol)

    Intro to IPSec (cont)


    Transport Mode
    Real IP Header

    IP Options

    IPSec Header

    Payload (For example, TCP and Payload)

    Could be either
    ESP Header
    Or
    AH Header

    Authenticates Over

    Encrypts Over

    Intro to IPSec (cont)


    Tunnel Mode
    GW IP Header

    IPSec Header

    Real IP Header

    Payload (For example, TCP and Payload)

    Could be either
    ESP Header
    Or
    AH Header

    Authenticates Over

    Encrypts Over

    Point-to-Point Tunneling Protocol


    Microsofts Implementation of VPN
    Data is first encapsulated inside PPP
    packets
    PPP packets are then encapsulated in
    GRE packets and sent over the link
    PPTP uses two connections
    One for the data being sent
    Another for a control channel

    L2TP
    Layer 2 Tunneling Protocol
    Supported by routers
    If two routers support L2TP, and are properly
    configured, then VPN is set up between routers

    L2TP = L2F + PPTP


    Combines the best features of L2F and
    PPTP

    Easy upgrade from L2F or PPTP


    Allows PPP frames to be sent over
    non-IP (Frame relay, ATM) networks
    also (PPTP works on IP only)
    Not widely deployed.

    You might also like

    pFad - Phonifier reborn

    Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

    Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


    Alternative Proxies:

    Alternative Proxy

    pFad Proxy

    pFad v3 Proxy

    pFad v4 Proxy