| Overview

This module primarily covers the Virtual Private Network (VPN) protocols available in Cisco IOS routers. A VPN provides the same network connectivity for remote users over a public infrastructure, as they would have over a private network. However, before allowing a user to access a network, certain measures must be taken to ensure authenticity, data integrity, and encryption. In this module, the student will learn about each of these measures and also will be provided with an introduction to the two basic VPN types: Remote Access and LAN-to-LAN. This module will focus on LAN-to-LAN (or site-to-site) VPN.

After introducing the reader to the basics of the site-to-site VPN, the different protocols utilized in authenticating users, providing encryption, and data integrity are examined. This module introduces the user to the IOS cryptosystem, IPSec, and shared keys. Finally, the student will be introduced to digital certificates.

Upon completion of this module, the student will be able to identify and configure the protocols used to ensure authenticity, data integrity, and confidentiality with a site-to-site VPN using pre-shared keys and digital certificates.

NOTE: It is required that the student study the commands covered in the chapter using the labs and the command reference. Not all required commands are covered in sufficient detail in the text alone. Successful completion of this course requires a thorough knowledge of command syntax and application.