3 - VPN

Question 1

VPN

Answer 1

Virtual Private Network,

Provides access to secure private networks

Question 2

VPN Protocols

Answer 2

PPTP (Point to point)
- obsolete
L2F (Layer 2 Forwarding)
L2TP (L2 Tunnelling)
IPSec

Question 3

VPN Encryption Tunnel Mode

Answer 3

• protects packet from header to payload
• more resources but useful if destination should be hidden

Question 4

VPN Encryption Transport Mode.

Answer 4

• only protects payload
• doesn’t conceal endpoint identity

Question 5

Software VPN Advantages

Answer 5

• Easy install
• Decent conneciton speed
• Portable

Question 6

Software VPN Disadvantages

Answer 6

• Difficult to configure
• VPN Server is exposed

Question 7

Hardware VPN Advantages

Answer 7

• Designed for routing
• Designed for good security
• Big network organisations

Question 8

Hardware VPN Disadvantages

Answer 8

• Cost
• CHecking compatibility with other devices

Question 9

IPSec services examples

ACDRC

Answer 9

• Access control
• COnnectionless integrity
• Data origin authentication
• Rejection of replayed packets
• Confidentiality

Question 10

IPSec Packet

Answer 10

IP Header
IPSec Header
Secure IP Payload

Question 11

IPsec VPN negotiation

Answer 11

A and B
1. A sends traffic to B
2. RouterA and RouterB negotiate an IKE Phase 1 session
3. Then an IKE Phase 2 session
4. Info exchanged via IPsec tunnel
5. tunnel terminated