All language subtitles for 6. Site-To-Site Connectivity Security

It on a section we're going to go to the side to side.

With the security.

And let's start with the P.N. weepie an extensive procurement network across the public networks such

as the Internet enables the users to send and receive that data across shared or public networks as

if they are competing devices were directly connected to the private network we Prempro.

It's mainly 3:03 benefits and they are the Firstly reduced cost because the area where is yeah like

your office in WI PM you do not need to travel to your office to connect your local area network.

No problem if you're in a cafe.

No problem if you're in a restaurant or wherever you are.

Everywhere may be your office in WI PM and the second benefit is scale ability because the Internet

based we peons enable organizations to use the Internet infrastructure within ISP and devices.

And the third security because VPN can provide high level security by using Edwins authorization and

encryption protocols and we have three main parts of the VPN and they are side to side plans remote

access re-appears and the EM repair that's going to be the site to site re-appears site.

So we plan all those employees in a geographical and disparate offices to share one Kwesi with all their

work in this type of VPN host may not have the VPN client software they send and receive normal TCAP

IP refrig through air we can get away and the VPN gateway is responsible for encapsulating and encrypting

outbound traffic sending it through a VPN tunnel over the Internet to a peer weepie and get at the target

site.

And as you can see an area of worry has offices in your wheelchair office a office B and D office C

and we had the whooping gateway devices and the second measles we're going to focus on is the remote

access VPN remote access VPN allows employees to access the companies Internet from home or while traveling

outside the office in this type of weepin we pay class gain secure access to the enterprise network

wire a VPN server and VPN client so they may be required for the connection.

And as you can see in here we have some Another uses.

As you can see for example home users the user in the hotel there are more buyers are in here and buy

one another user in the conference center and something like that.

And these guys are connected to the corporate network by the help of VPN server in here.

And last minute we're going to focus on is the DMB p.m. dynamic multi-point VPN then we P.N. is running

technique we can use to build a VPN network with multiple sites without having to statically configuring

all devices.

It is a hub and spoke network as you can see in the figure where the spokes are will be able to communicate

with each other directly without having to hop.

Encryption is also supported to the SEC which makes the army pen a popular choice for connectome different

sites using regular internet connection.

That's going to decide to site Jeery Talos Jeery is the most basic talent pool local they will up by

Cisco that allows the anchor isolation of world wide sea of network Les porticoes inside the point to

point links in this technique and virtual tunnel is created between two end points and packets are sent

through the Jeery tunnel as you can see in here.

We have a source and we have another hosting here and they can communicate by the end of the tunnel

which is the most basic tunneling technique you are eternal and we have no encryption or something like

that in the GOP.

And the future of the Jeery there's no full control because there is no encryption Jeery is now secure

and jury report for the cell and for the communication.

And here's the configuration of the jury to configure Deery on I rather we're getting into the Tarnow

interface by typing interface tunnel and the town name.

And we're defining our IP address in here as you can see here we are typing term for the one warm.

And the we are typing our subnet mask as well then we're defining our tunnel mode as the Jeery Jeery

IP and we're defining at source and the total destination.

And they are the public IP address as you can see here to a jury configuration we can use these two

ip interface brief command and Shergar if our Tunnell interface is up or not let's go ahead with the

IPs sec.

IP that is the political shoot for secure IP communications that works by authenticating and ankar thing.

Each IP packet of communications session in this tunneling technique that will travel securely is the

key point guys from a pro and network over the public IP network.