© 2007 Cisco Systems, Inc. All rights reserved.SNRS v2.04-1 Secured Connectivity Examining Cisco IOS VPNs. - презентация

1 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v Secured Connectivity Examining Cisco IOS VPNs

2 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v IPsec VPN Deployment Site-to-site VPNs –Fully meshed (static) –Hub (static) and spoke (dynamic) –Fully meshed on demand (dynamic) –DMVPN Remote-access VPNs –Cisco Easy VPN –WebVPN (Cisco IOS SSL VPN)

3 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v Virtual Private Networks Cisco IOS Router Telecommuters Extranet Branch Offices Workplace Resources Site-to-Site VPNs Remote- Access VPNs Partner Headquarters DSL/Cable Frame Relay T1 ATM

4 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v Fully Meshed VPNs IPsec Tunnel Static IP Addresses There are static public addresses between peers. Local LAN addresses can be private or public.

5 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v Hub-and-Spoke VPNs Static IP Addresses IPsec Tunnel Dynamic IP Addresses Static public address needed at the hub only. Spoke addresses can be dynamically applied using DHCP.

6 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v Dynamic Multipoint VPNs IPsec Tunnel Static IP Addresses Dynamic IP Addresses Dynamic Spoke-to-Spoke IPsec Tunnels Local LAN addresses can be private.

7 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v Easy VPN Clients Cisco Easy VPN Workplace Resources Internet Cisco IOS Router and Easy VPN Server Cisco Unity is the common VPN language between Cisco devices. Remote Office Home Office Headquarters

8 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v Cisco IOS WebVPN Workplace Resources Internet WebVPN Integrated security and routing Clientless and full network SSL VPN access SSL VPN Tunnel Headquarters

9 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v Summary An IPsec VPN is a VPN deployed on a shared infrastructure using IPsec encryption technology. For any-to-any connectivity, a full mesh of tunnels is required to provide a path between all of the sites. In a hub-and-spoke network configurations, the spoke sites connect with IPsec tunnels to a hub site to establish connectivity to the network.

10 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v Summary (Cont.) DMVPNs provide for a combination of static and dynamic on-demand tunnels. Cisco Easy VPN makes it easier than ever to deploy VPNs as part of small and medium businesses or large enterprise networks. Cisco IOS SSL-based VPN (WebVPN) is an emerging technology that provides remote-access connectivity from almost any Internet-enabled location using a web browser and its native SSL encryption.

11 © 2007 Cisco Systems, Inc. All rights reserved.SNRS v