NETGEAR VPN

VPN Concepts, Tips, and Techniques 1-1
Version 1.0, July 2003
1Introduction to VPN
VPN Concepts, Tips, and Techniques
There have been many improvements in the Internet including Quality of Service, network
performance, and inexpensive technologies, such as DSL. But one of the most important advances
has been in Virtual Private Networking (VPN) Internet Protocol security (IPSec). IPSec is one of
the most complete, secure, and commercially available, standards-based protocols developed for
transporting data.
What is a VPN?
A VPN is a shared network where private data is segmented from other traffic so that only the
intended recipient has access. The term VPN was originally used to describe a secure connection
over the Internet. Today, however, VPN is also used to describe private networks, such as Frame
Relay, Asynchronous Transfer Mode (ATM), and Multiprotocol Label Switching (MPLS).
A key aspect of data security is that the data flowing across the network is protected by encryption
technologies. Private networks lack data security, which allows data attackers to tap directly into
the network and read the data. IPSec-based VPNs use encryption to provide data security, which
increases the network’s resistance to data tampering or theft.
IPSec-based VPNs can be created over any type of IP network, including the Internet, Frame
Relay, ATM, and MPLS, but only the Internet is ubiquitous and inexpensive.
VPNs are traditionally used for:
• Intranets: Intranets connect an organization’s locations. These locations range from the
headquarters offices, to branch offices, to a remote employee’s home. Often this connectivity
is used for e-mail and for sharing applications and files. While Frame Relay, ATM, and MPLS
accomplish these tasks, the shortcomings of each limits connectivity. The cost of connecting
home users is also very expensive compared to Internet-access technologies, such as DSL or
cable. Because of this, organizations are moving their networks to the Internet, which is
inexpensive, and using IPSec to create these networks.
Intro2VPN.fm Page 1 Sunday, November 23, 2003 12:57 PM

NETGEAR VPN Specifications

General

Brand	NETGEAR
Model	VPN
Category	Network Router
Language	English

Summary

VPN Fundamentals and IPSec

Defining Virtual Private Networks (VPNs)

Explains VPNs as secure networks for private data, accessible via the internet or private networks.

Understanding IPSec for Network Security

Details IPSec as an IETF standard suite providing data authentication, integrity, and confidentiality.

Key IPSec Security Features

Covers IPSec's authentication, integrity, and confidentiality features for secure data transfer.

IPSec Components: ESP, AH, and IKE

Explains core IPSec components: ESP for encryption, AH for integrity, and IKE for key management.

IPSec Modes of Operation

Compares IPSec's Transport Mode (payload protection) and Tunnel Mode (full packet protection).

VPN Configuration and Operation

IPSec Key Management and SA Setup

Details IPSec key management using IKE and the setup of Security Associations (SAs).

Preparing for VPN Configuration

Guides users on gathering essential information before starting VPN configuration.

VPN Gateway and Network Addressing

Explains VPN gateway roles and the importance of public/private network interface addressing.

Firewall Configuration for VPNs

Emphasizes the need for proper firewall rules to permit VPN tunnel traffic.

Establishing a VPN Tunnel: Negotiation Steps

Outlines the sequence of steps involved in IPSec SA negotiation for tunnel establishment.

IPSec and IKE Configuration Parameters

Lists critical parameters for IKE Phase I and Phase II required for VPN setup.

Testing and Troubleshooting VPN Connections

Provides methods for testing VPN functionality and common troubleshooting steps.