Different Protocols in Virtual Private Networks

[Dewei]

I have recently started studying about the Virtual Private Networks (VPN). I have cleared some basic concepts that are required to for simple setup. But still I am not having much knowledge about the protocols that are used in VPN. So I am posting here, so that anyone hanging out there can help me.!! Please provide some information about the protocols used in VPN as soon as possible.

[BoanHed]

Each protocol presented allows for performance of VPN solutions. The purpose of using web browsers is to allow users to use a tool they are accustomed and which requires no additional configuration. But when a certificate expires the user has to manually renew. This can pose problems for novice users. Also on most web browsers consulting lists of revoked certificates is not enabled by default any security based on such certificates Ssl this poses a serious security problem. Nothing prevents the more the customer to download a revised version of its browser to use new features (skins, plugins ...). Nothing certifies that the browser has not been changed and its certifying authority is a well.

[Jamaima]

Finally Another problem associated with the use of Web browsers such as basic VPN is their specificity to the online world. Indeed by default a browser that does not intercept communications or possibly Https ftps. All communications from other types of applications (MS Outlook or a database for example) are not supported. This problem is usually circumvented by running a dedicated Java applet in the browser. But this also implies the maintenance of this applet (make sure the client has the correct version, it can re-download required). The idea that the web browser is an ideal platform for achieving VPN access is seriously qualified.

[Jannat]

Pptp has the advantage of being fully integrated into Windows environments. This means in particular that access to remote LAN can be made via the authentication system of Windows NT: RADIUS and its management and group rights. But like many Microsoft product safety is the weak point of the product :

• Poor management of passwords in mixed environments Win 95/NT
• Weaknesses in the generation of session keys: made from a hash of the password instead of being completely randomly generated. (Facilitates attacks "brute force")
• Weaknesses MSCHAP a cryptographic protocol corrected in version 2 but no control over this version has been made by an independent entity.
• Identification of unimplemented packages: vulnerability to attacks such as "spoofing"

[Billie]

The security mechanisms implemented in IPsec are more robust and more recognized than those established by Microsoft PPTP. By default L2TP protocol uses IPSec. But if the remote server does not support L2TP can use a different security protocol. Should therefore ensure that all facilities of a well implements L2TP IPSec protocol. IPsec does identify as machines and not users. This is particularly problematic for mobile users. It must therefore provide an authentication service users. In the case of dial-up is the login to be used to authenticate the user. But in the case of Internet connection it will provide an additional authentication phase of tunnel establishment.

[Baser-X]

Mpls is now the solution appeared to be the most mature market. The ability to obtain a QoS guarantee contract is something that weighs heavily in the balance of decision makers. However, only specialized operators provide this service This may pose new problems. Firstly, It is these operators that fix prices. This price includes a margin for forcing the service provider. On the other hand certain company does not want to outsource their communications to a single operator. Indeed, the stock market bubble burst around technology stocks has prompted a wave of bankruptcies of network operators and many companies have seen their connections cut off overnight. This risk is now firmly taken into account by decision makers. However, using multiple operators to manage the VPN complicates the management and configuration of it.

[Jackson2]

Mpls allows you to assign priorities to traffic through the service classes. Lower than that of Frame Relay and Atm but higher than other IP VPN. It is similar to the security offered by the networks existing Frame Relay and Atm. All applications, including enterprise software vital requiring high quality service and low latency and real-time applications (video and voice over IP ). Does not require high scalability as interconnection of equals between sites and standard deployments can support tens of thousands of VPN connections.

[johnson22]

The transfer is being made on the public Internet, a service can only "best effort" in Ipsec. Low through transfer via the public Internet domain. Also the total security through a combination of digital certificates and PKI for authentication and a variety of options for encryption, including Triple DES and AES. Remote access and mobile secure. Applications over IP, including email and Internet. Unsuitable for real-time traffic or high priority. The most extensive deployments require careful planning to address particular problems of interconnection site to site and peering.