|
Virtual Private Networks 2nd Edition
Historically, only large companies could afford secure
networks, which they created from expensive leased lines.
Smaller folks had to make do with the relatively untrusted
Internet. Nowadays, even large companies have to go outside
their private nets, because so many people telecommute or
log in while they're on the road. How
do you provide a
low-cost, secure electronic network for your organization?
The solution is a virtual private network: a collection of
technologies that creates secure connections or "tunnels"
over regular Internet lines--connections that can be easily
used by anybody logging in from anywhere. A number of
products now exist to help you develop that solution.
This book tells you how to plan and build a VPN. It starts
with general concerns like costs, configuration, and how a
VPN fits in with other networking technologies like
firewalls. It continues with detailed descriptions of how to
install and use VPN technologies that are available for
Windows NT and Unix, such as PPTP and L2TP, Altavista
Tunnel, Cisco PIX, and the secure shell (SSH).
New features in the second edition include SSH, which is a
popular VPN solution for Unix systems, and an expanded
description of the IPSec standard, for which several
vendors have announced support.
Topics include:
How the VPN compares to other available networking
technologies
Introduction to encryption, firewalls, the IPSec standard,
and other technologies that let VPNs work
Point to Point Tunneling Protocol (PPTP) and L2TP
The Altavista Tunnel
The Cisco PIX Firewall
Secure Shell (SSH)
Maintenance and troubleshooting
Preface
1. Why Build a Virtual Private Network?
What Does a VPN Do?
Security Risks of the Internet
How VPNs Solve Internet Security Issues
VPN Solutions
A Note on IP Address and Domain Name Conventions
Used in This Book
2. Basic VPN Technologies
Firewall Deployment
Encryption and Authentication
VPN Protocols
Methodologies for Compromising VPNs
Patents and Legal Ramifications
3. Wide Area, Remote Access, and the VPN
General WAN, RAS, and VPN Concepts
VPN Versus WAN
VPN Versus RAS
4. Implementing Layer 2 Connections
Differences Between PPTP, L2F, and L2TP
How PPTP Works
Features of PPTP
5. Configuring and Testing Layer 2 Connections
Installing and Configuring PPTP on a Windows NT RAS Server
Configuring PPTP for Dial-up Networking on a Windows NT Client
Configuring PPTP for Dial-up Networking on a Windows
or 98 Client
Enabling PPTP on Remote Access Switches
Making the Calls
Troubleshooting Problems
Using PPTP with Other Security Measures
6. Implementing the AltaVista Tunnel
Advantages of the AltaVista Tunnel System
AltaVista Tunnel Limitations
How the AltaVista Tunnel Works
VPNs and AltaVista
7. Configuring and Testing the AltaVista Tunnel
Getting Busy
Installing the AltaVista Tunnel
Configuring the AltaVista Tunnel Extranet and Telecommuter Server
Configuring the AltaVista Telecommuter Client
Troubleshooting Problems
8. Creating a VPN with the Unix Secure Shell
The SSH Software
Building and Installing SSH
SSH Components
Creating a VPN with PPP and SSH
Troubleshooting Problems
A Performance Evaluation
9. The Cisco PIX Firewall
The Cisco PIX Firewall
The PIX in Action
Configuring the PIX as a Gateway
Configuring the Other VPN Capabilities
10. Managing and Maintaining Your VPN
Choosing an ISP
Solving VPN Problems
Delivering Quality of Service
Security Suggestions
Keeping Yourself Up-to-Date
11. A VPN Scenario
The Topology
Central Office
Large Branch Office
Small Branch Offices
Remote Access Users
A Network Diagram
A. Emerging Internet Technologies
B. Resources, Online and Otherwise
Index
|
