|
|
With the exponential growth and use of the Internet for IP transport, secure encrypted communication is essential to the protection of sensitive data that traverses insecure communication channels.
IPsec VPN is a standard framework that provides secure access to information with integrity, authenticity, and confidentiality. IPsec VPN provides protection for IP traffic at the network layer of the OSI model. The IPsec framework is the most common and the only available secure VPN framework solution.
The chapter provided a basic overview of various types of IPsec VPN technologies and deployments. The chapter also presented a detailed list of IPsec-related RFCs, IPsec modes, IPsec protocol headers, and a detailed understanding of ISAKMP, IKE, and IKEv2.
In addition, the chapter explained the concept of using a dedicated IPsec interface called IPsec VTI—Virtual Tunnel Interface.
The chapter also described the PKI by giving details of PKI standards, components, the certificate enrollment process, and the format of the X.509 certificate.
The major focus of the chapter is the Cisco IPsec VPN implementations. Two types of IPsec VPN implementations were discussed: the site-to-site and Remote Access VPN.
The chapter provided extensive details on how to implement site-to-site and Remote Access VPN using various illustrations, diagrams, and sample configurations.
|
|