Please enable JavaScript.

Coggle requires JavaScript to display documents.

VPN and IPsec Concepts - Coggle Diagram

- - - - 8.2.3 Site-to-Site IPsec VPNsSite-to-site VPNs are used to connect networks across another untrusted network such as the internet. In a site-to-site VPN, end hosts send and receive normal unencrypted TCP/IP traffic through a VPN terminating device. The VPN terminating is typically called a VPN gateway.
      - 8.2.4 GRE over IPsec Generic Routing Encapsulation (GRE) is a non-secure site-to-site VPN tunneling protocol. It can encapsulate various network layer protocols. It also supports multicast and broadcast traffic which may be necessary if the organization requires routing protocols to operate over a VPN.
      - The Wireshark screen capture in the figure displays an OSPF Hello packet that was sent using GRE over IPsec.
        
        8.2.5 Dynamic Multipoint VPNs Dynamic Multipoint VPN (DMVPN) is a Cisco software solution for building multiple VPNs in an easy, dynamic, and scalable manner. Like other VPN types, DMVPN relies on IPsec to provide secure transport over public networks, such as the internet.
        
        DMVPN simplifies the VPN tunnel configuration and provides a flexible option to connect a central site with branch sites. It uses a hub-and-spoke configuration to establish a full mesh topology. Spoke sites establish secure VPN tunnels with the hub site, as shown in the figure.
        
        DMVPN Hub-to-Spoke and Spoke-to-Spoke Tunnels
        
        8.2.6 IPsec Virtual Tunnel Interface
        Like DMVPNs, IPsec Virtual Tunnel Interface (VTI) simplifies the configuration process required to support multiple sites and remote access. IPsec VTI configurations are applied to a virtual interface instead of static mapping the IPsec sessions to a physical interface.
        
        8.2.7 Service Provider MPLS VPNsLayer 3 MPLS VPN - The service provider participates in customer routing by establishing a peering between the customer’s routers and the provider’s routers.
        Layer 2 MPLS VPN - The service provider is not involved in the customer routing.