IPSec VPN Design

IPSec VPN Design
by Mohamed Khalid, Scott Wainner, Vijay Bollapragada

IPSec VPN Design
List Price: $60.00
Our Price: $30.99
You Save: $29.01 (48%)
Availability: Usually ships in 1-2 business days
Buy Used: from $24.49 (click here)
Category: Book
See more book details and other editions


or

Book Summary Information

Author: Mohamed Khalid, Scott Wainner, Vijay Bollapragada
Edition: Paperback
Audio: English (Unknown); English (Original Language); English (Published)
Published: 2005-04-08
ISBN: 1587051117
Number of pages: 384
Publisher: Cisco Press

Book Reviews of IPSec VPN Design

Book Review: A Definitive Design and Deployment Guide
Summary: 5 Stars

IPSec VPN Design (ISBN 1587051117) focuses on the design and implementation of IPSec VPNs. The authors consider this the "definitive design and deployment guide for secure virtual private networks." There are many theoretical publications covering the foundations of network security, but VPN security design is especially challenging. There are so many variables that even knowing the theoretical concepts, models, tradeoffs, and scalability, it can still be a daunting task. This book is for the advanced/expert in the network security field.

Because of the advanced topics presented in this guide, considerable network management and/or a network engineer level of experience is needed to use the wealth of information presented by authors Vijay Bollapragada (CCIE), Mohamed Khalid (CCIE), and Scott Wainner. It is expected that the reader will have a working knowledge of IP routing, architectures, WAN technologies, Cisco IOS, and network security. The introductory chapters briefly "review" knowledge that the authors expect users to have which results in getting everyone focused on the starting point of this technical guide.

The concept of network security is not the same in all environments as each VPN will have different connectivity and integration platforms. This guide to designing an IPSec type of VPN is Cisco based. The configuration examples and troubleshooting output are Cisco IOS. Many design principles -efficient, reliable, cost effective, fault-tolerant, and scalable -- have commonality in several environments, but again, all illustrations and examples use Cisco technology. This book does design IPSec VPNs from many perspectives.

The organization of IPSec VPN Design is organized into three units: introduction and concepts; design and deployment; service enhancements. This organizes technical material as it moves from a brief review of technologies that use VPNs, to an overview of IPSec architecture, protocols, components, and concludes by examining advanced issues such as voice, multicast, and network-based VPNs.

As an introduction to this topic, an IPSec VPN is configured and packet processing is explained step-by-step using Cisco IOS. The illustrations and diagrams of the topology, end-to-end packet processing, and configuration command output (from show and debug commands) is very helpful to the reader. IPSec protocols and the differences between tunnel mode and transport mode are described.

After an introduction to authentication and security, the authors move into considerable detail and enhanced features of IPSec, scalability, and fault tolerance with dead peer detection or control plane keepalives. There are always unique challenges to implementing VPNs, and this book gives examples from the authors' experience to handle situations for interaction with NAT (Network Address Translation) or PMTUD (Path Maximum Transmission Unit Detection). To end the introduction/concepts unit, authentication/authorization models for remote access users discusses XAUTH (Extended Authentication) and MODE-CFG (Mode-configuration). Cisco's EzVPN connection model and digital certification conclude this unit. The authors then move to applying these concepts to VPN design.

The design and deployment phase considers hub and spoke architecture, failover, fault tolerance, and alleviation of complexity in large-scale situations using TED (Tunnel End-Point Discovery) and DMVPN (Dynamic Multipoint VPN). Advanced enhancements include quality of service (QoS), interoperability with voice and video, and a new type of VPN service known as the network-based VPN.

Topics move from general introductory concepts (Chapters 1-4) to specific design and deployment (Chapters 5-7), and concludes with advanced/integrated service enhancements (Chapters 8-9). The authors have taken care to explain pros and cons of various designs and give alternatives. The "notes" sections illustrate advantages and disadvantages or add relevant comments from the author's experience. Illustrations are appropriate, easily read, and well-designed. There is an abundance of configuration examples, complete with resulting show and debug output, and all with highlighting to assist the learner. These types of real-world examples are easier to learn from than the traditional technical documentation. The index is complete; there is not a glossary which might have been helpful for some readers.

Throughout this guide, Bollapragada, Khalid, and Wainner have managed to write at a level that is appropriate for an advanced topic while using examples that are easily understood. Some network managers may not actually design an IPSec VPN, but still need to understand the principles of security, be able to communicate with technical support, and work with network engineers and service providers in maintaining/troubleshooting the VPN. Advanced understanding and good troubleshooting skills are contained in this guide.

IPSec VPN Design is a well-written, concise guide to designing VPNs in general and IPSec VPNs specifically. It would be helpful to individuals taking their networking skills to another level or those studying for CCIE or Security certifications. It targets network engineers and network designers working at the corporate level or working for the service provider. Bollapragada, Khalid, and Wainner each brought their expertise and considerable experience into the collaboration while authoring this book.

An excellent book published by Cisco Press, 2005, which deserves a rating of 5 on a 1-5 scale.

Summary of IPSec VPN Design

The definitive design and deployment guide for secure virtual private networks

  • Learn about IPSec protocols and Cisco IOS IPSec packet processing
  • Understand the differences between IPSec tunnel mode and transport mode
  • Evaluate the IPSec features that improve VPN scalability and fault tolerance, such as dead peer detection and control plane keepalives
  • Overcome the challenges of working with NAT and PMTUD
  • Explore IPSec remote-access features, including extended authentication, mode-configuration, and digital certificates
  • Examine the pros and cons of various IPSec connection models such as native IPSec, GRE, and remote access
  • Apply fault tolerance methods to IPSec VPN designs
  • Employ mechanisms to alleviate the configuration complexity of a large- scale IPSec VPN, including Tunnel End-Point Discovery (TED) and Dynamic Multipoint VPNs (DMVPN)
  • Add services to IPSec VPNs, including voice and multicast
  • Understand how network-based VPNs operate and how to integrate IPSec VPNs with MPLS VPNs

Among the many functions that networking technologies permit is the ability for organizations to easily and securely communicate with branch offices, mobile users, telecommuters, and business partners. Such connectivity is now vital to maintaining a competitive level of business productivity. Although several technologies exist that can enable interconnectivity among business sites, Internet-based virtual private networks (VPNs) have evolved as the most effective means to link corporate network resources to remote employees, offices, and mobile workers. VPNs provide productivity enhancements, efficient and convenient remote access to network resources, site-to-site connectivity, a high level of security, and tremendous cost savings.

 

IPSec VPN Design is the first book to present a detailed examination of the design aspects of IPSec protocols that enable secure VPN communication. Divided into three parts, the book provides a solid understanding of design and architectural issues of large-scale, secure VPN solutions. Part I includes a comprehensive introduction to the general architecture of IPSec, including its protocols and Cisco IOS® IPSec implementation details. Part II examines IPSec VPN design principles covering hub-and-spoke, full-mesh, and fault-tolerant designs. This part of the book also covers dynamic configuration models used to simplify IPSec VPN designs. Part III addresses design issues in adding services to an IPSec VPN such as voice and multicast. This part of the book also shows you how to effectively integrate IPSec VPNs with MPLS VPNs.

 

IPSec VPN Design provides you with the field-tested design and configuration advice to help you deploy an effective and secure VPN solution in any environment.

 

This security book is part of the Cisco Press® Networking Technology Series. Security titles from Cisco Press help networking professionals secure critical data and resources, prevent and mitigate network attacks, and build end-to-end self-defending networks.

Privacy Books

Book Subjects
Most talked about in Privacy Books
Cryptography Decrypted ImageCryptography Decrypted
by H. X. Mel, Doris M. Baker
Addison-Wesley Professional; Published: 2000-12-31; Paperback; Book
Best price: $30.00
Price in other shops: $54.99
The Law of Copyright and the Internet: The 1996 WIPO Treaties, Their Interpretation and Implementation ImageThe Law of Copyright and the Internet: The 1996 WIPO Treaties, Their Interpretation and Implementation
by Mihï¿1/2ly Ficsor
Oxford University Press, USA; Published: 2002-05-16; Hardcover; Book
Best price: $157.16
Price in other shops: $510.00
Network Security for Government and Corporate Executives ImageNetwork Security for Government and Corporate Executives
by Rand Morimoto, Chris Amaris, Andrew Abbate, Mark Weinhardt
Prentice Hall; Published: 2006-10-01; Paperback; Book
Best price: $70.00
Price in other shops: $73.33
Myspace: Safe Online Networking for Your Kids ImageMyspace: Safe Online Networking for Your Kids
by Larry Magid, Anne Collier
Prentice Hall; Published: 2006-12-07; Paperback; Book
Using Set for Secure Electronic Commerce with CDROM ImageUsing Set for Secure Electronic Commerce with CDROM
by Grady Drew
Prentice Hall PTR; Published: 1998-11-30; Paperback; Book
Best price: $3.80
Price in other shops: $44.99
Network Security: Private Communication in a Public World (2nd Edition) ImageNetwork Security: Private Communication in a Public World (2nd Edition)
by Charlie Kaufman, Radia Perlman, Mike Speciner
Prentice Hall; Published: 2002-05-02; Hardcover; Book
Best price: $54.99
Price in other shops: $84.99
Windows Internet Security: Protecting Your Critical Data ImageWindows Internet Security: Protecting Your Critical Data
by Seth Fogie, Cyrus Peikari
Prentice Hall; Published: 2001-10-07; Paperback; Book
Best price: $6.99
Price in other shops: $39.99
Administrating Web Servers, Security, & Maintenance Interactive Workbook ImageAdministrating Web Servers, Security, & Maintenance Interactive Workbook
by Eric Larson, Brian Stephens
Prentice Hall; Published: 2000-01-09; Paperback; Book
Best price: $12.99
Price in other shops: $65.32
Keeping Found Things Found: The Study and Practice of Personal Information Management (Interactive Technologies) ImageKeeping Found Things Found: The Study and Practice of Personal Information Management (Interactive Technologies)
by William Jones
Morgan Kaufmann; Published: 2007-11-15; Paperback; Book
Best price: $34.00
Price in other shops: $57.95
Upgrade Your Life: The Lifehacker Guide to Working Smarter, Faster, Better ImageUpgrade Your Life: The Lifehacker Guide to Working Smarter, Faster, Better
by Gina Trapani
Wiley; Published: 2008-03-17; Paperback; Book
Best price: $5.99
Price in other shops: $29.99
Similar Books and other products
Cisco Access Control Security: AAA Administration Services ImageCisco Access Control Security: AAA Administration Services
by Brandon James Carroll
Cisco Press; Published: 2004-06-06; Paperback; Book
Best price: $99.86
TcL Scripting for Cisco IOS (Networking Technology) ImageTcL Scripting for Cisco IOS (Networking Technology)
by Raymond Blair, Arvind Durai, John Lautmann
Cisco Press; Published: 2010-06-19; Paperback; Book
Best price: $43.41
Price in other shops: $62.00
Internet Routing Architectures (2nd Edition) ImageInternet Routing Architectures (2nd Edition)
by Sam Halabi
Cisco Press; Published: 2000-09-02; Hardcover; Book
Best price: $49.56
Price in other shops: $72.00
Penetration Testing and Network Defense ImagePenetration Testing and Network Defense
by Andrew Whitaker, Daniel Newman
Cisco Press; Published: 2005-11-10; Paperback; Book
Best price: $40.00
Price in other shops: $69.00
BGP Design and Implementation ImageBGP Design and Implementation
by Randy Zhang, Micah Bartell
Cisco Press; Published: 2003-12-22; Hardcover; Book
Best price: $51.57
Price in other shops: $75.00
SSL Remote Access VPNs (Network Security) ImageSSL Remote Access VPNs (Network Security)
by Qiang Huang, Jazib Frahim
Cisco Press; Published: 2008-06-20; Paperback; Book
Best price: $24.49
Price in other shops: $55.00
Cisco ASA: All-in-One Firewall, IPS, Anti-X, and VPN Adaptive Security Appliance (2nd Edition) ImageCisco ASA: All-in-One Firewall, IPS, Anti-X, and VPN Adaptive Security Appliance (2nd Edition)
by Jazib Frahim, Omar Santos
Cisco Press; Published: 2010-01-08; Paperback; Book
Best price: $51.49
Price in other shops: $82.00
AAA Identity Management Security (Networking Technology: Security) ImageAAA Identity Management Security (Networking Technology: Security)
by Vivek Santuka, Premdeep Banga, Brandon J. Carroll
Cisco Press; Published: 2010-12-26; Paperback; Book
Best price: $17.27
Price in other shops: $70.00
IPSec Virtual Private Network Fundamentals ImageIPSec Virtual Private Network Fundamentals
by James Henry Carmouche
Cisco Press; Published: 2006-07-29; Paperback; Book
Best price: $40.00
Price in other shops: $63.00
The Complete Cisco VPN Configuration Guide ImageThe Complete Cisco VPN Configuration Guide
by Richard Deal
Cisco Press; Published: 2005-12-25; Paperback; Book
Best price: $31.99
Price in other shops: $90.00