IPSec VPN Design
The definitive design and deployment guide for secure virtual private networks
Vijay Bollapragada, Mohamed Khalid, Scott Wainner - Collection Cisco Systems
Résumé
Among the many functions that networking technologies permit is the ability for organizations to easily and securely communicate with branch offices, mobile users, telecommuters, and business partners. Such connectivity is now vital to maintaining a competitive level of business productivity. Although several technologies exist that can enable interconnectivity among business sites, Internet-based virtual private networks (VPNs) have evolved as the most effective means to link corporate network resources to remote employees, offices, and mobile workers. VPNs provide productivity enhancements, efficient and convenient remote access to network resources, site-to-site connectivity, a high level of security, and tremendous cost savings.
IPSec VPN Design is the first book to present a detailed examination of the design aspects of IPSec protocols that enable secure VPN communication. Divided into three parts, the book provides a solid understanding of design and architectural issues of large-scale, secure VPN solutions. Part I includes a comprehensive introduction to the general architecture of IPSec, including its protocols and Cisco IDS IPSec implementation details. Part II examines IPSec VPN design principles covering hub-and-spoke, full-mesh, and fault-tolerant designs. This part of the book also covers dynamic configuration models used to simplify IPSec VPN designs. Part III addresses design issues in adding services to an IPSec VPN such as voice and multicast. This part of the book also shows you how to effectively integrate IPSec VPNs with MPLS VPNs. IPSec VPN Design provides you with the field-tested design and configuration advice to help you deploy an effective and secure VPN solution in any environment.
- Learn about IPSec protocols and Cisco IDS IPSec packet processing
- Understand the differences between IPSec tunnel mode and transport mode
- Evaluate the IPSec features that improve VPN scalability and fault tolerance, such as dead peer detection and control plane keepalives
- Overcome the challenges of working with NAT and PMTUD
- Explore IPSec remote-access features, including extended authentication, mode-configuration, and digital certificates
- Examine the pros and cons of various IPSec connection models such as native IPSec, GRE, and remote access
- Apply fault tolerance methods to IPSec VPN designs
- Employ mechanisms to alleviate the configuration complexity of a large-scale IPSec VPN, including Tunnel End-Point Discovery (TED) and Dynamic Multipoint VPNs (DMVPN)
- Add services to IPSec VPNs, including voice and multicast
- Understand how network-based VPNs operate and how to integrate IPSec VPNs with MPLS VPNs
L'auteur - Vijay Bollapragada
Vijay Bollapragada, CCIE No. 1606, is a senior manager in the Network Systems Integration and Test Engineering group at Cisco Systems where he works on the architecture, design, and validation of complex network solutions.
L'auteur - Mohamed Khalid
Mohamed Khalid, CCIE No. 1435, is a technical leader working with IP VPN solutions at Cisco. He works extensively with service providers across the globe and their associated Cisco account teams to determine technical and engineering requirements for various IP VPN architectures.
L'auteur - Scott Wainner
Scott Wainner is a Distinguished Systems Engineer in the U.S. Service Provider Sales Organization at Cisco Systems where he focuses on VPN architecture and solution development. In this capacity, he provides customer guidance on IP VPN architectures and drives internal development initiatives within Cisco Systems.
Sommaire
- Introduction
- Introduction to VPNs
- IPSec Overview
- Enhanced IPSec Features
- IPSec Authentication and Authorization Models
- IPSec VPN Architectures
- Designing Fault-Tolerant IPSec VPNs
- Auto-Configuration Architectures for Site-to-Site IPSec VPNs
- IPSec and Application Interoperability
- Network-Based IPSec VPNs
- Index
Caractéristiques techniques
| PAPIER | |
| Éditeur(s) | Cisco Press |
| Auteur(s) | Vijay Bollapragada, Mohamed Khalid, Scott Wainner |
| Collection | Cisco Systems |
| Parution | 31/05/2005 |
| Nb. de pages | 352 |
| Format | 18,5 x 23 |
| Couverture | Broché |
| Poids | 648g |
| Intérieur | Noir et Blanc |
| EAN13 | 9781587051111 |
| ISBN13 | 978-1-58705-111-1 |
Avantages Eyrolles.com
Consultez aussi
- Les meilleures ventes en Graphisme & Photo
- Les meilleures ventes en Informatique
- Les meilleures ventes en Construction
- Les meilleures ventes en Entreprise & Droit
- Les meilleures ventes en Sciences
- Les meilleures ventes en Littérature
- Les meilleures ventes en Arts & Loisirs
- Les meilleures ventes en Vie pratique
- Les meilleures ventes en Voyage et Tourisme
- Les meilleures ventes en BD et Jeunesse
