000 04453cam a2200301 a 4500
008 100223s2005 inua 001 0 eng
010 _a2002106378
020 _a9781587051111(pbk.)
020 _a1587051117 (pbk.)
035 _a(Sirsi) u3726
040 _aEG-CaNU
_c EG-CaNU
_d EG-CaNU
042 _ancode
082 _a005.8
_2 22
100 1 _aBollapragada, Vijay.
_97334
245 1 0 _aIPSec VPN design
_b the definitive design and deployment guide for secure virtual private networks /
_c Vijay Bollapragada, Mohamed Khalid, Scott Wainner.
260 _aIndianapolis, IN. :
_b Cisco Press,
_c c2005.
300 _axvii, 352 p. :
_b ill. ;
_c 24 cm.
490 0 _aNetworking technology series
500 _aCover title.
500 _aIncludes index
505 0 _aChapter 1 Introduction to VPNs -- Chapter 2 IPSec Overview -- Chapter 3 Enhanced IPSec Features -- Chapter 4 IPSec Authentication and Authorization Models -- Chapter 5 IPSec VPN Architectures -- Chapter 6 Designing Fault-Tolerant IPSec VPNs -- Chapter 7 Auto-Configuration Architectures for Site-to-Site IPSec VPNs -- Chapter 8 IPSec and Application Interoperability -- Chapter 9 Network-Based IPSec VPNs -- Index.
520 _ahe definitive design and deployment guide for secure virtual private networks : Learn about IPSec protocols and Cisco IOS IPSec packet processing, Understand the differences between IPSec tunnel mode and transport mode, Evaluate the IPSec features that improve VPN scalability and fault tolerance, such as dead peer detection and control plane keepalives, Overcome the challenges of working with NAT and PMTUD, Explore IPSec remote-access features, including extended authentication, mode-configuration, and digital certificates, Examine the pros and cons of various IPSec connection models such as native IPSec, GRE, and remote access, Apply fault tolerance methods to IPSec VPN designs, Employ mechanisms to alleviate the configuration complexity of a large- scale IPSec VPN, including Tunnel End-Point Discovery (TED) and Dynamic Multipoint VPNs (DMVPN), Add services to IPSec VPNs, including voice and multicast, Understand how network-based VPNs operate and how to integrate IPSec VPNs with MPLS VPNs. Among the many functions that networking technologies permit is the ability for organizations to easily and securely communicate with branch offices, mobile users, telecommuters, and business partners. Such connectivity is now vital to maintaining a competitive level of business productivity. Although several technologies exist that can enable interconnectivity among business sites, Internet-based virtual private networks (VPNs) have evolved as the most effective means to link corporate network resources to remote employees, offices, and mobile workers. VPNs provide productivity enhancements, efficient and convenient remote access to network resources, site-to-site connectivity, a high level of security, and tremendous cost savings. IPSec VPN Design is the first book to present a detailed examination of the design aspects of IPSec protocols that enable secure VPN communication. Divided into three parts, the book provides a solid understanding of design and architectural issues of large-scale, secure VPN solutions. Part I includes a comprehensive introduction to the general architecture of IPSec, including its protocols and Cisco IOSĀ® IPSec implementation details. Part II examines IPSec VPN design principles covering hub-and-spoke, full-mesh, and fault-tolerant designs. This part of the book also covers dynamic configuration models used to simplify IPSec VPN designs. Part III addresses design issues in adding services to an IPSec VPN such as voice and multicast. This part of the book also shows you how to effectively integrate IPSec VPNs with MPLS VPNs. IPSec VPN Design provides you with the field-tested design and configuration advice to help you deploy an effective and secure VPN solution in any environment. This security book is part of the Cisco PressĀ® Networking Technology Series. Security titles from Cisco Press help networking professionals secure critical data and resources, prevent and mitigate network attacks, and build end-to-end self-defending networks.
650 0 _aIPSec (Computer network protocol)
_97335
650 0 _aExtranets (Computer networks)
_x Security measures.
_97336
700 1 _aKhalid, Mohamed.
_96759
700 1 _aWainner, Scott.
_97337
596 _a1
999 _c2712
_d2712