Transcript VIRTUAL PRIVATE NETWORK

VIRTUAL PRIVATE
NETWORK
By:
Sunday Be
Cuong Diep
Overview
Introduction to VPN
System Requirement
Basic VPN Requirement
How to Enable VPN and configure as
server
How to Configure the VPN Client
What is VPN ?
Virtual private networking (VPN) in Microsoft
Windows 2000 allows mobile users to connect
over the Internet to a remote network.
With virtual private networking, the user
connects to the local ISP and then uses the
Internet to make a connection to the Network
Access Server (NAS).
How Does VPN Work?
The Internet Security and Acceleration
(ISA) Server is configured as a VPN Server
The local ISA VPN computer connects to its ISP
The remote VPN wizard runs on the ISA Server
on the remote network
The remote ISA Server VPN computer connects
to its ISP
When a computer on the local network
communicates with a computer on the remote
network, data is encapsulated and sent through
the VPN tunnel
VPN Tunnel
System Requirement
Microsoft Windows 2000, Server
Microsoft Windows 2000, Professional
Basic VPN Requirements
User Authentication
Address Management
Data Encryption
Key Management
Multi protocol Support
User Authentication
VPN client’s identity must be verified and
access must be restricted to authorized
users only
Address Management
The VPN server must assign the client an IP
address on the intranet and ensure that private
addresses are kept private
IP addresses can be assigned using DHCP or a
static pool of addresses
Data Encryption
Data sent and received over the Internet
must be encrypted for privacy
Microsoft Implementation of these
protocols uses IPSec encryption to protect
the data stream from the client to the
tunnel server.
Key Management
The solution must generate and refresh
encryption keys for the client and the
server
Multi-Protocol Support
The solution must handle common
protocols used in the public network.
These include IP, Internet work Packet
Exchange (IPX), etc…
Install and Enable VPN
Windows 2000 Server supports a VPN
network and already has software installed
on the operating system.
A user will only have to enable this feature
INTERNET CONNECTION NEDDED (DSL)
CAN LEASE T-1 LINE
COMPANY WILL PROVIDE REAL
IP ADDRESS
Configuring a VPN Client
Web Reference
www.Microsoft.com
– Keyword “Virtual Private Network”
END OF VPN PROJECT