Naveen Patel

Virtual Private Network

VPN is a service that offers secure & reliable communication over a shared

public network.

VPN carries private traffic over a public network using advanced encryption

and tunnel methods to provide

Confidentiality of information

Integrity of data

Authentication of user

Anti-replay

Naveen Patel
 Cont.

Data packet is encrypted & encapsulated

with a new header to provide security.

Naveen Patel
 VPN can be configured in many ways

Point to point

Point to Multipoint

Client initiated (Remote Access)

Naveen Patel
 Tunneling Protocols

L2TP

L2F

PPTP

IPSec

GRE

Naveen Patel
 Cont
GRE: Generic Routing Encapsulation
GRE does not provide encryption.

It supports both IP or Non-IP Unicast and Multicast

It encapsulates IP, CLNP, IPX protocols inside IP Packet.

L2TP: Layer 2 Tunneling Protocol.

It does not provide Encryption.

It is a combination of Cisco L2F(Layer 2 Forwarding) and Microsoft PPTP

It can forward IP and Non IP unicast, multicast and Broadcast traffic

Naveen Patel
 Cont

IPSec: Internet Protocol Security .

It is an open Standard Protocol

It supports Unicast IP

It Provides Data Security by Encryption

It provides data integrity

It provides Tunneling

Naveen Patel
 GRE Site-to-Site VPN

11.0.0.1 12.0.0.1
S0 S1

E0
E0 192.168.3.1/24
192.168.1.1/24

LAN: 192.168.3.0/24
LAN: 192.168.1.0/24

Naveen Patel
C:\> telnet 192.168.1.1
Connecting

WELCOME TO HYDERBAD ROUTER HydConfig

User Access Verification

Password: **** Configuring

ConfiguringTunnel
Tunnel
Hyderabad> Enable
Router(config)# interface
Password:Router(config)# interfacetunnel
tunnel<no>
<no>
****
Router(config-if)#
Hyderabad# Configure Terminal Ip address <ip address> <mask>
Router(config-if)# Ip address <ip address> <mask>
Enter configuration commands, one per line. End with CNTL/Z.
Router(config-if)#
Router(config-if)#
HYDERABAD(config)#
Tunnel
Tunnel
Interface Serial 0
Source
Source<ip<ipaddress>
address>
Router(config-if)#
HYDERABAD(config-if)# Tunnel
Ip address
Router(config-if)# Destination
11.0.0.1
Tunnel 255.0.0.0
Destination <ip
<ipaddress>
address>
HYDERABAD(config-if)# No shut
HYDERABAD(config-if)# Encapsulation ppp
HYDERABAD(config-if)# exit
HYDERABAD(config)# Interface tunnel 10
HYDERABAD(config-if)# Ip address 192.168.0.1 255.255.255.0
HYDERABAD(config-if)# Tunnel source 11.0.0.1
HYDERABAD(config-if)# Tunnel Destination 12.0.0.1
HYDERABAD(config-if)# Exit
HYDERABAD(config)#

Naveen Patel
C:\> telnet 192.168.3.1
Connecting
CheConfig
WELCOME TO Chennai ROUTER

User Access Verification

Password: **** Configuring

ConfiguringTunnelTunnel
Chennai> Enable
Router(config)# interface
Password:Router(config)# interfacetunnel
tunnel<no>
<no>
****
Chennai#Router(config-if)# Ip
Configure Terminal
Router(config-if)# Ipaddress
address<ip <ipaddress>
address><mask>
<mask>
Enter configuration commands, one per line. End with CNTL/Z.
Router(config-if)#
Router(config-if)#
Chennai(config)#
Tunnel
Tunnel
Interface Serial 1
Source
Source<ip <ipaddress>
address>
Router(config-if)#
Chennai(config-if)# Ip address Tunnel
Router(config-if)# 12.0.0.1 Destination
Tunnel 255.0.0.0
Destination <ip
<ipaddress>
address>
Chennai(config-if)# No shut
Chennai(config-if)# Encapsulation ppp
Chennai(config-if)# exit
Chennai(config)# Interface tunnel 10
Chennai(config-if)# Ip address 192.168.0.2 255.255.255.0
Chennai(config-if)# Tunnel source 12.0.0.1
Chennai(config-if)# Tunnel Destination 11.0.0.1
Chennai(config-if)# Exit
Chennai(config)#

Naveen Patel
C:\>ping 192.168.3.10 Hydping
Pinging 192.168.3.10 with 32 bytes of data:

Reply from 192.168.3.10: bytes=32 time=48ms TTL=126

Reply from 192.168.3.10: bytes=32 time=48ms TTL=126
Reply from 192.168.3.10: bytes=32 time=48ms TTL=126
Reply from 192.168.3.10: bytes=32 time=48ms TTL=126

Ping statistics for 192.168.3.10:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 48ms, Maximum = 48ms, Average = 48ms

C:\>

Naveen Patel
C:\> tracert 192.168.3.10 hydtrace
Tracing route to 192.168.3.10 over a maximum of 30 hops

1 1 ms 1 ms 1 ms Hyd [192.168.1.1]
2 55 ms 55 ms 71 ms 192.168.0.2
3 64 ms 64 ms 64 ms 192.168.3.10

Trace complete.

C:\>

Naveen Patel