Please enable JavaScript.
Coggle requires JavaScript to display documents.
4 - Virtual Private Network (VPN) - Coggle Diagram
4 - Virtual Private Network (VPN)
Definitions
Tunneling = process that protects the contents of protocol packets by encapsulating them in packets of another protocol
Two modes
Transport mode
Encryption protection for the payload only
Best used within a trusted network
Synonyms
Host-to-host VPN
End-to-end encrypted VPN
Tunnel mode
Encryption protection for both header and payload
Variants
Site-to-site VPN
2 independent networks are linked
Remote access VPN
Client to VPN server
Link encryption VPN
Aka remote access VPN
Always-on VPN
Always trying to connect
Split vs Full tunnel
Split tunnel = internal network + internet
Full tunnel == all traffic sent to organization
Common VPN protocols
Point-to-Point Tunneling Protocol (PPTP)
Obsolete
Layer 2
TCP/1723
Authentication
PAP
CHAP
EAP
MS-CHAPv2
Layer 2 Tunneling Protocol (L2TP)
Layer 2
UDP/1701
802.1X with AAA server
RADIUS
TACACS+
Can use payload encryption with IPSec ESP
SSH
TCP/22
OpenVPN
IPSec
Authentication Header (AH)
Provide assurances of message integrity and nonrepudiation
Encapsulating Security Payload (ESP)
Provide confidentiality and integrity of payload contents
AES encryption
Hash-based Message Authentication Code (HMAC)
Integrity mechanism
IP Payload Compression (IPComp)
Internet Key Exchange (IKE)
OAKLEY
Key generation and exchange protocol similar to Diffie-Hellman
Internet Security Association and Key Management Protocol (ISAKMP)
Organize and manage the encryption keys that have been generated and exchanged by OAKLEY and SKEME
Secure Key Exchange Mechanism (SKEME)