1 / 19

VPN

VPN. TRAFIK PRIVAT MBI INFRASTRUKTUREN PUBLIKE. VPN. Kerkesat : Siguri ( jo i aksesueshem per kedo ) I rezervuar Transparence ndaj aplikacioneve Shembull : Extranet. Modele te VPN-ve. Overlay Routerat e rrjetit nuk arrijne te shquajne prezencen e VPN-se

miles
Download Presentation

VPN

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. VPN TRAFIK PRIVAT MBI INFRASTRUKTUREN PUBLIKE

  2. VPN • Kerkesat: • Siguri (jo i aksesueshem per kedo) • I rezervuar • Transparencendajaplikacioneve • Shembull: Extranet

  3. Modele te VPN-ve • Overlay • Routerat e rrjetit nuk arrijne te shquajne prezencen e VPN-se • Realizimi behet nepermjet tunneling • Probleme • Overhead paketimi • Humbje e QoS

  4. Overlay • Probleme : • Routim jo eficent

  5. PEERS • Gjithe routerat e rrjetit njohin dhe menaxhojne VPN • Routim klasik • Probleme : • Nuk eshte kompatibel me adresimin privat • Me e veshtire garantimi i sigurise

  6. IPsec • Protokollet kryesore: • AH (AUTHENTICATION HEADER) • REALIZON AUTENTIFIKIM BURIMI DHE INTEGRITET MESAZHI • ESP (ENCAPTULATION SECURETY PAYLOAD) • AUTENTIFIKIM, INTEGRITET DHE SEKRET

  7. NDERTIMI I NJE KONEKSIONI NE NIVEL 3 • SA Security association • Kanal unidireksional • Identifikator i protokollit te sigurise • (AH ose ESP) • Adresa IP e burimit • Identifikues me 32 bit i koneksionit • SPI: Security Parameter Index

  8. AUTHENTIFICATION HEADER Mban informacione protokolli Mban nje numer sekuence per cdo datagram Ose nje pjese te IP datagrames te firmosur me DES

  9. Formati i ESP I autentifikuar I shifruar

  10. Protokolle te menaxhimit te IPsec • Protokolli IKE • Internet Key Exchange • (kembim i celesave) • Protokolli ISKMP • Procedura per stabilizimin dhe nderprerjen e SA

  11. Tunneling me IPsec • AH • ESP

  12. Virtual Private Networks (VPN) VPNs • Infrastrukture SP : • backbone • provider edge device • Klient : • customer edge devices (komunikimmbinje shared backbone) Networke menaxhohen nga nje service provider (SP)

  13. VPN - arkitektura customer edge device provider edge device

  14. VPN: pamja logjike virtual private network customer edge device provider edge device

  15. Linjat e dedikuara VPN Klient site te lidhura me provider edge Site kliente te nderlidhura nepermjet kanaleve statike virtuale( ATM VCs), lidhjeve te dedikuara)

  16. Klientet e VPN • te gjitha funksionet VPN te implementuara nga klienti • Sitet kliente te nderlidhura nepermjet tuneleve • tunele te enkriptuara ne menyre tipike • SP trajton paketat VPN si paketat e tjera

  17. Network-based Layer 3 VPNs multiple virtual routers in single provider edge device

  18. Tunneling

  19. VPNs: perse? • privacy • security • Punojne mire me mobilitetin • cost: e ndryshme sipas kerkesave te klienteve te VPN

More Related