| Overview

This module will cover the creation and configuration of secure virtual private networks (VPNs). VPNs are a very useful tool in securing traffic between two remote networks. This is because VPNs grant the ability to carry on private communications across public networks, such as the Internet.

After a review of the concept of VPNs, this module covers how to configure VPNs. At this point, important security concepts such as Internet Key Exchange (IKE) and IP Security (IPSec) are introduced. This is followed by two sections that describe the configuration of these important protocols.

Verifying the VPN is covered next, including checking the access-control lists (ACLs), Internet Key Exchange (IKE), IP Security (IPSec), and the crypto map. This is followed by a section that introduces the Cisco VPN Client, and discusses its configuration for various roles in the network. Finally, this module introduces the topic of scaling PIX Security Appliance VPNs over multiple clients using automatic tools.

NOTE: It is required that the student study the commands covered in the chapter using the labs and the command reference. Not all required commands are covered in sufficient detail in the text alone. Successful completion of this course requires a thorough knowledge of command syntax and application.