[计算机硬件及网络]第9章 企业局域网的组建.ppt

* Cisco Systems defines VPN as “ an encrypted connection between private networks over a public network such as the Internet”. The “V” and “N” stand for virtual network. The information from a private network is transported over a public network, Internet, to form a virtual network. The “P” stands for private. To remain private, the traffic is encrypted to keep the data confidential. VPN is a private virtual network. There are three types of VPN networks, remote access, site-to-site, and Firewall based VPN. In this section, we’ll discuss the three VPN solutions and then we’ll cover the related Cisco products. * The first VPN solution is remote access. Remote access is targeted to mobile user and Home telecommuters. Most people have access to the Internet from there homes, why not take advantage of it. In the past, corporations supported remote users via dial-in networks. This typically necessitated a toll, or 1-800, call to access the corporation. With the advent of VPNs, a mobile user can make a local call to their ISP to access corporation via Internet wherever they may be. It is an evolution of dial networks. Remote access VPN can support the needs of telecommuters, mobile users, extranet consumer-to-business, and so on. * The next VPN solution is site-to-site. Site-to-Site is targeted at corporate site interconnection. In the past, a leased line or frame relay connection was required to connect sites. Most corporations have Internet access. Why not take advantage of the corporate Internet access. Site-to-site VPN can be used to provide the network connection between sites. VPN can support company intranets and business partner extranets. Site-to-site VPN is an extension of classic WAN network. * The last solution is Firewall based VPN. Firewall VPN is inherently a site-to-site solution. Firewall-based VPN solutions are not a technical issue but a security issue. The question is “who manages the VPN network”. If corporate security manages t