A hands on course covering IP VPNs from the basics of benefits and Internet vs. Intranet VPNs through to detailed analysis of the technologies involved in IP VPNs. All the major VPN protocols are covered including PPPoE, L2TP, SSL, IPsec and dynamic VPNs. MPLS L3 VPNs are also covered.
IP Security foundation for engineers.
By the end of the course delegates will be able to: Describe what an IP VPN is and explain the difference between different VPN types. Recognise the design and implementation issues involved in implementing an IP VPN. Explain how the various technologies involved in an IP VPN work. Describe and implement: L2TP, IPsec, SSL, MPLS L3 VPNs. Evaluate VPN technologies.
What is a VPN? What is an IP VPN? VPNs vs. Private Data Networks, Internet VPNs, Intranet VPNs, Remote access VPNs, Site to site VPNs, VPN benefits and disadvantages.
VPN components, VPN tunnels, tunnel sources, tunnel end points, hardware based VPNs, Firewall based VPNs, software based VPNs, tunnelling topologies, tunnelling protocols, which tunnelling protocol should you use? requirements of tunnels.
Critical VPN security requirements, Encryption and authentication, Diffie Hellman, DES, 3DES, RSA, PKI, Ca server types, pre shared keys versus certificates, Enrolling with a CA, RADIUS in VPNs.
Encapsulation, operation, authentication.
Hands on Setting up PPPoE and analysing PPP packets.
Overview, Components, How it works, control and data connections, GRE.
Hands on Building a PPTP VPN.
Overview, components, how it works, security, packet authentication, L2TP/IPSec, L2TP/PPP, Layer 2 versus layer 3 tunnelling.
Hands on Implementing a L2TP tunnel.
AH, HMAC, ESP, transport and tunnel modes, Security Association, use of encryption and authentication algorithms, manual vs automated key exchange, NAT and other issues.
Hands on Implementing an IPSec VPN.
Headers, architecture, label switching, LDP, MPLS VPNs.
PE and CPE, management, various VPN products.
VPN architectures: terminate VPN before/on/ after/in parallel with firewall, resilience issues, VRRP, performance issues, QoS and VPNs. documentation.
Sınıf eğitimlerimizi İstanbul, Ankara ve Londra ofislerimizde düzenlemekteyiz. Kurumunuza özel eğitimleri ise, dilediğiniz tarih ve lokasyonda organize edebiliriz.