Cisco SSL VPN solutions (formerly known as Cisco WebVPN solutions) give you a flexible and secure way to extend networking resources to virtually any remote user with access to the Internet and a web browser. Remote access based on SSL VPN delivers secure access to network resources by establishing an encrypted tunnel across the Internet using a broadband (cable or DSL) or ISP dialup connection.

SSL Remote Access VPNs provides you with a basic working knowledge of SSL virtual private networks on Cisco SSL VPN-capable devices. Design guidance is provided to assist you in implementing SSL VPN in existing network infrastructures. This includes examining existing hardware and software to determine whether they are SSL VPN capable, providing design recommendations, and guiding you on setting up the Cisco SSL VPN devices. Common deployment scenarios are covered to assist you in deploying an SSL VPN in your network.

Read More »

IPSec: The New Security Standard for the Internet, Intranets, and Virtual Private Networks, Second Edition

The insider’s guide to IPSec for every network professional—updated for the newest standards, techniques, and applications.

Using IPSec, companies can build VPNs and other Internet-centered applications with confidence that their data will remain secure. IPSec, Second Edition is the most authoritative, comprehensive, accessible, and up-to-date guide to IPSec technology. Two leading authorities in IPSec standardization and implementation cover every facet of IPSec architecture and deployment, review important technical advances since IPSec was first standardized, and present new case studies that show how IPSec can provide end-to-end security in real business environments.

Read More »

This is the eBook version of the printed book.

Troubleshooting Virtual Private Networks

Master advanced troubleshooting techniques for IPSec, MPLS Layer-3, MPLS Layer-2 (AToM), L2TPv3, L2TPv2, PPTP, and L2F VPNs

* Learn the step-by-step, end-to-end methodology essential for troubleshooting virtual private networks (VPNs)
* Gain the in-depth knowledge necessary for fast and efficient troubleshooting of IPSec, MPLS Layer-3, MPLS Layer-2 (AToM), L2TPv3, L2TPv2, PPTP, and L2F VPNs
* Master advanced troubleshooting tools and techniques for all applicable VPN types
* Debug and fix IPSec site-to-site and remote access VPN issues, such as IKE (ISAKMP) phase 1 and phase 2 negotiation failure, ESP and AH traffic drops, certificate enrollment failures, and maximum transmission unit (MTU) problems
* Locate and resolve MPLS Layer-3 VPN problems, such as those involving route exchange and label switched path (LSP) failure, MPLS VPN over traffic engineering tunnels, and Multicast VPNs (MVPN)
* Discover solutions for issues in AToM and L2TPv3-based Layer-2 VPNs, including pseudowire setup failures, attachment circuit problems, and MTU issues
* Obtain answers for L2TPv2, PPTP, and L2F control connection establishment, session setup, PPP negotiation, and VPN performance issues
* Refer to specially designed flowcharts to identify issues and find solutions fast
* Consolidate VPN troubleshooting knowledge through bonus hands-on labs
* Read and understand detailed analysis of all relevant VPN show and debug command output

Read More »

This is the eBook version of the printed book.

MPLS and VPN Architectures, Volume II

Master the latest MPLS VPN solutions to design, deploy, and troubleshoot advanced or large-scale networks

With MPLS and VPN Architectures, Volume II, you’ll learn:

* How to integrate various remote access technologies into the backbone providing VPN service to many different types of customers
* The new PE-CE routing options as well as other advanced features, including per-VPN Network Address Translation (PE-NAT)
* How VRFs can be extended into a customer site to provide separation inside the customer network
* The latest MPLS VPN security features and designs aimed at protecting the MPLS VPN backbone
* How to carry customer multicast traffic inside a VPN
* The latest inter-carrier enhancements to allow for easier and more scalable deployment of inter-carrier MPLS VPN services
* Advanced troubleshooting techniques including router outputs to ensure high availability

Read More »

This is the eBook version of the printed book.

MPLS and VPN Architectures

A practical guide to understanding, designing, and deploying MPLS and MPLS-enabled VPNs

* In-depth analysis of the Multiprotocol Label Switching (MPLS) architecture
* Detailed discussion of the mechanisms and features that constitute the architecture
* Learn how MPLS scales to support tens of thousands of VPNs
* Extensive case studies guide you through the design and deployment of real-world MPLS/VPN networks
* Configuration examples and guidelines assist in configuring MPLS on Cisco® devices
* Design and implementation options help you build various VPN topologies

Multiprotocol Label Switching (MPLS) is an innovative technique for high-performance packet forwarding. There are many uses for this new technology, both within a service-provider environment and within the enterprise network, and the most widely deployed usage today is the enabling of Virtual Private Networks (VPNs). With the introduction of MPLS-enabled VPNs, network designers are able to better scale their networks than with the methods available in the past.

Read More »

This is the eBook version of the printed book.

MPLS VPN Security

A practical guide to hardening MPLS networks

* Define “zones of trust” for your MPLS VPN environment
* Understand fundamental security principles and how MPLS VPNs work
* Build an MPLS VPN threat model that defines attack points, such as VPN separation, VPN spoofing, DoS against the network’s backbone, misconfigurations, sniffing, and inside attack forms
* Identify VPN security requirements, including robustness against attacks, hiding of the core infrastructure, protection against spoofing, and ATM/Frame Relay security comparisons
* Interpret complex architectures such as extranet access with recommendations of Inter-AS, carrier-supporting carriers, Layer 2 security considerations, and multiple provider trust model issues
* Operate and maintain a secure MPLS core with industry best practices
* Integrate IPsec into your MPLS VPN for extra security in encryption and data origin verification
* Build VPNs by interconnecting Layer 2 networks with new available architectures such as virtual private wire service (VPWS) and virtual private LAN service (VPLS)
* Protect your core network from attack by considering Operations, Administration, and Management (OAM) and MPLS backbone security incidents

Multiprotocol Label Switching (MPLS) is becoming a widely deployed technology, specifically for providing virtual private network (VPN) services. Security is a major concern for companies migrating to MPLS VPNs from existing VPN technologies such as ATM. Organizations deploying MPLS VPNs need security best practices for protecting their networks, specifically for the more complex deployment models such as inter-provider networks and Internet provisioning on the network.

Read More »