CYS406 · Annotated SlidesChapter 13 — VPN Fundamentals
Chapter 13 · Annotated slides

VPN Fundamentals

How a VPN works and why to use one, VPN components and concentrators, remote-access vs. site-to-site VPNs, hardware vs. software VPNs, encapsulation, encryption and authentication, VPN technologies and topologies (hub-and-spoke, point-to-point, full mesh, star), security risks, and the AAA/RADIUS setup.

Slide text Study notes Highlight: key words Tips, tricks & traps Seen again elsewhere How it can come up
Slide 1: Module Flow
Exam weight Low
    Slide 2: Slide 2
    Exam weight Low
      Slide 3: How VPN Works
      Exam weight Low
      1. A VPN builds an encrypted tunnel over a public network so remote users or sites act as if on the private LAN.
      Slide 4: Why Establish VPN?
      Exam weight Low
        Slide 5: VPN Components
        Exam weight Low
        1. Components: VPN client, network access server (NAS), tunnel terminating device / concentrator, protocols.
        Slide 6: VPN Concentrators
        Exam weight Low
          Slide 7: Functions of a VPN Concentrator
          Exam weight Low

            VPN Types and Categories

            Slide 8
            8
            Exam weight Low
              Slide 9: Client-to-Site (Remote-access) VPNs
              Exam weight Low
              1. Remote-access (client-to-site): one user to the company network.
              Slide 10: Site-to-Site VPNs
              Exam weight High
              1. Site-to-site: connects whole networks (branch to HQ), gateway to gateway.
              🎯 How this can come up · 1 question
              MCQ

              Connecting a branch office network to headquarters is a:

              Slide 11: ❑ A dedicated hardware VPN appliance is used to connect routers and gateways to ensure communication over an insecure channel
              Exam weight Low
                Slide 12: Hardware VPN Products
                Exam weight Low
                  Slide 13: Software VPNs
                  Exam weight Low
                    Slide 14: Software VPN Products
                    Exam weight Low
                      Slide 15: Selecting an Appropriate VPN
                      Exam weight Low
                        Slide 16: VPN Core Functionality: Encapsulation
                        Exam weight Low
                        1. Core functions: encapsulation, encryption, authentication (plus integrity).
                        Slide 17: Slide 17
                        Exam weight Low
                          Slide 18: VPN Core Functionality: Authentication
                          Exam weight Low
                            Slide 19: VPN Technologies
                            Exam weight High
                            1. Technologies: IPsec, SSL/TLS VPNs, PPTP (obsolete), L2TP (with IPsec).
                            🎯 How this can come up · 1 question
                            MCQ

                            Which VPN protocol is considered insecure today?

                            Slide 20: VPN Technologies (Cont’d)
                            Exam weight Low
                              Slide 21: VPN Topologies
                              Exam weight High
                              1. Topologies: hub-and-spoke (sites via a central hub), point-to-point, full mesh (every site to every site), star.
                              🎯 How this can come up · 1 question
                              MCQ

                              n sites in a full-mesh VPN need how many tunnels?

                              Slide 22: Hub-and-Spoke VPN Topology
                              Exam weight Low
                                Slide 23: Point-to-Point VPN Topology
                                Exam weight Low
                                  Slide 24: Full Mesh VPN Topology
                                  Exam weight Low
                                    Slide 25: Star Topology
                                    Exam weight Low
                                      Slide 26: VPN Security Risks
                                      Exam weight Low
                                      1. Risks: weak authentication, compromised endpoints, split tunneling, outdated protocols.

                                      VPN Security

                                      Slide 27
                                      27
                                      Exam weight Low
                                        Slide 28: ❑ Firewalls establish a protection barrier between the VPN and the Internet
                                        Exam weight Low
                                          Slide 29: IPsec Server
                                          Exam weight Low
                                            Slide 30: AAA Server
                                            Exam weight Low
                                              Slide 31: Remote Access Dial-In User Service
                                              Exam weight Low
                                                Slide 32: Remote Access Dial-In User Service (Cont’d)
                                                Exam weight Low
                                                  Slide 33: Slide 33
                                                  Exam weight Low
                                                    Slide 34: Connection to VPN: SSL and PPP
                                                    Exam weight Low
                                                      Slide 35: Connection to VPN: Concentrator
                                                      Exam weight Low