This is the eBook version of the printed book.

IPSec VPN Design

The definitive design and deployment guide for secure virtual private networks

* Learn about IPSec protocols and Cisco IOS IPSec packet processing
* Understand the differences between IPSec tunnel mode and transport mode
* Evaluate the IPSec features that improve VPN scalability and fault tolerance, such as dead peer detection and control plane keepalives
* Overcome the challenges of working with NAT and PMTUD
* Explore IPSec remote-access features, including extended authentication, mode-configuration, and digital certificates
* Examine the pros and cons of various IPSec connection models such as native IPSec, GRE, and remote access
* Apply fault tolerance methods to IPSec VPN designs
* Employ mechanisms to alleviate the configuration complexity of a large- scale IPSec VPN, including Tunnel End-Point Discovery (TED) and Dynamic Multipoint VPNs (DMVPN)
* Add services to IPSec VPNs, including voice and multicast
* Understand how network-based VPNs operate and how to integrate IPSec VPNs with MPLS VPNs

Read More »

This is the eBook version of the printed book.

An introduction to designing and configuring Cisco IPsec VPNs

* Understand the basics of the IPsec protocol and learn implementation best practices
* Study up-to-date IPsec design, incorporating current Cisco innovations in the security and VPN marketplace
* Learn how to avoid common pitfalls related to IPsec deployment
* Reinforce theory with case studies, configuration examples showing how IPsec maps to real-world solutions

IPsec Virtual Private Network Fundamentals provides a basic working knowledge of IPsec on various Cisco routing and switching platforms. It provides the foundation necessary to understand the different components of Cisco IPsec implementation and how it can be successfully implemented in a variety of network topologies and markets (service provider, enterprise, financial, government). This book views IPsec as an emerging requirement in most major vertical markets, explaining the need for increased information authentication, confidentiality, and non-repudiation for secure transmission of confidential data. The book is written using a layered approach, starting with basic explanations of why IPsec was developed and the types of organizations relying on IPsec to secure data transmissions. It then outlines the basic IPsec/ISAKMP fundamentals that were developed to meet demand for secure data transmission. The book covers the design and implementation of IPsec VPN architectures using an array of Cisco products, starting with basic concepts and proceeding to more advanced topics including high availability solutions and public key infrastructure (PKI). Sample topology diagrams and configuration examples are provided in each chapter to reinforce the fundamentals expressed in text and to assist readers in translating concepts into practical deployment scenarios. Additionally, comprehensive case studies are incorporated throughout to map topics to real-world solutions.

Read More »