Wide Area Networks (WANs) Chapter 7 Copyright 2003 Prentice-Hall Panko’s Business Data Networks and Telecommunications, 4 th edition.

Slides:



Advertisements
Similar presentations
Wide Area Networks (WANs)
Advertisements

Presented by: Eng. Karam Al-sofy
12-Access and Interconnection Technologies
12-Access and Interconnection Technologies Dr. John P. Abraham Professor UTPA.
TYPES; 1. Analog Analog 2. ISDN ISDN 3. B-ISDN B-ISDN 4. DSL DSL 5. ADSL ADSL 6. SDSL SDSL 7. VDSL VDSL 8. CABLE CABLE 9. Wireless Wireless 10. T-1 lines.
Wide Area Networks (WANs) Chapter 7 Updated Dec XU Zhengchuan Fudan University.
Wide Area Networks (WANs) Chapter 7 Updated January 2007 Panko’s Business Data Networks and Telecommunications, 6th edition Copyright 2007 Prentice-Hall.
© 2009 Pearson Education, Inc. Publishing as Prentice Hall 6-1 Raymond Panko’s Business Data Networks and Telecommunications, 7th edition May only be used.
Broadband local access technology
WAN Technologies Dial-up modem connections Cheap Slow
CSCI 4550/8556 Computer Networks Comer, Chapter 12: Long Distance Digital Connection Technologies.
VOIP and the “Last Mile” 1. Voice over IP (VoIP) 2.
Telecommunications systems (Part 1) School of Business Eastern Illinois University © Abdou Illia, Spring 2007 (Week 12, Tuesday 3/27/2007)
COS 338 Day DAY 12 Agenda Capstone Proposal Overdue 3 accepted, 2 in mediation, 1 MIA Assignment 4 Due Lab 4 is Today & Oct 24 (After exam) OpNet.
Modems and Beyond Chapter 5 Copyright 2001 Prentice Hall Revision 2: July 2001.
1 Chapter Overview Using Remote Connections SLIP and PPP WAN Technologies.
Thought For The Week No Question Is A Bad Question!
Backbone Networks, MAN, WAN
1 Chapter 12 Remote Network Access Using Remote Connections SLIP and PPP WAN Technologies.
Basic Computer Network
© 2009 Pearson Education, Inc. Publishing as Prentice Hall 7-1 Wide Area Networks (WANs) Chapter 7 Updated January 2009 Raymond Panko’s Business Data Networks.
Wide Area Networks (WANs)
ECT 250: Survey of e-commerce technology Networking.
1 Chapter 7 Networking: Computer Connections. Basic Components of a Network Sending device Communications link Receiving device.
© 2009 Pearson Education, Inc. Publishing as Prentice Hall 7-1 Wide Area Networks (WANs) Chapter 7 Updated January 2009 Raymond Panko’s Business Data Networks.
Network+ Guide to Networks, Fourth Edition Chapter 7 WANs, Internet Access, and Remote Connectivity.
1 Wide Area Networking. 2 Outline Topics Wide Area Networks –Link sites together –Carriers and regulation –Leased Line Networks –Public Switched Data.
Digital Subscriber Line- DSL
WANs and Remote Connectivity
© 2009 Pearson Education, Inc. Publishing as Prentice Hall Wide Area Networks (WANs) Chapter 7 Panko’s Business Data Networks and Telecommunications, 7th.
Types of Internet Connections
X.25 Packet switched Network consisting of X.25 switches. X.25 is a connection oriented protocol (Virtual Circuits). End nodes are identified by an X.25.
Modems and Beyond Chapter 5 Copyright 2001 Prentice Hall Revision 2: July 2001.
Power point presentation on internet Presentation by: Tenzin wangda.
Wide Area Networks. 2 Wide Area Networks (WANs) u WAN Technologies u Ordinary telephone line and telephone modem. u Point-to-Point Leased lines u Public.
333: DISCUSS THE FUNDAMENTALS OF NETWORKING.  1. Discuss networking concepts (20 hrs)  2. Discuss hardware & software requirement to setup a Local Area.
Wireline-Broadband. BSNL/ BROADBAND /BATHINDA2 What is Broadband ? As per recent Broadband Policy of GOI, access rate over 256 Kbps will be considered.
Wide Area Networks (WANs) Chapter 7 Updated January 2009 XU Zhengchuan Fudan University.
TYPES OF INTERNET CONNECTION ANALOG (DIAL-UPANALOG (DIAL-UP) ISDNB-ISBNDSLADSLVDSLSDSLCABBLE WIRELESS INTERNET CONNECTION INTERNET BONDEDBONDED T-1T-1T-1LINESATTELITTE.
1 Wide Area Network. 2 What is a WAN? A wide area network (WAN ) is a data communications network that covers a relatively broad geographic area and that.
From circuit to packet switching
Frame Relay, ATM and VPN Metropolitan Area Ethernet Overview.
Wide Area Networks (WANs) Chapter 7 (Modified April 2003) Copyright 2003 Prentice-Hall Panko’s Business Data Networks and Telecommunications, 4 th edition.
IT in Business Enterprise and Personal Communications Networks Lecture – 07.
Chapter 7 WANs, Internet Access, and Remote Connectivity Network+ Guide to Networks, Fourth Edition.
Chapter 7 WANs and Remote Connectivity. WAN Essentials A WAN traverses a large geographic area A WAN link is a connection from one site to another and.
WAN Technologies Dial-up modem connections
Frame Relay Most Popular PSDN Today –Offers speeds of 64 kbps to about 40 Mbps; This covers the range of greatest corporate demand –Most demand is at the.
Telecommunications systems (Part 2) School of Business Eastern Illinois University © Abdou Illia, Spring 2007 (Week 12, Thursday 3/29/2007) T-1 Digital.
© 2009 Pearson Education, Inc. Publishing as Prentice Hall 6-1 Raymond Panko’s Business Data Networks and Telecommunications, 7th edition May only be used.
Modems Mostly used to connect PCs to the Internet Modulates and demodulates the signal Converts analog data into digital and vice versa V.90/V.92 56K standards.
WANs and Remote Connectivity
Chapter 11 - Long-Distance Digital Connection Technologies Introduction Digital telephony Digitizing voice Example Sampling parameters Synchronous communication.
Introduction to WAN Technologies
WANs and Remote Connectivity
Wide Area Networks (WANs) Chapter 7 Panko’s Business Data Networks and Telecommunications, 6th edition Copyright 2007 Prentice-Hall May only be used by.
Chapter 7 Ben Bielskis WAN Wide Area Network Connects LANs over a large geographical area. WAN Link – A connection from one site to another.
Networks and Protocols CE Week 5b. WAN’s, Frame Relay, DSL, Cable.
COS 338 Day DAY 11 Agenda Questions? Capstone Proposal Overdue 3 accepted, 2 in mediation, 1 MIA Assignment 3 Due 1 B, 2 C’s, 1 F and 2 MIA Assignment.
HIGH SPEED WIDE AREA NETWORKS BYWANJAU. Introduction  WANs – Group of LANs linked together by communication service providers over large geographically.
1 CHAPTER 8 TELECOMMUNICATIONSANDNETWORKS. 2 TELECOMMUNICATIONS Telecommunications: Communication of all types of information, including digital data,
Modems and Beyond Chapter 5 Copyright 2001 Prentice Hall.
12-Access and Interconnection Technologies Dr. John P. Abraham Professor UTPA.
3/20: Telecommunications & Networking What is telecommunications? The hardware: physical components of telecommunications, inc. channels Standards: agreements.
Presented By: Gavin Worden Leased Lines vs. Internet Based VPNs.
Building Corporate Data Networks – A Case Study
Computer Engineering and Networks, College of Engineering, Majmaah University Mohammed Saleem Bhat CEN-444 Networks Structure And Protocols.
Ken Gunnells, Ph.D. - Networking Paul Crigler - Programming
Wide Area Networks (WANs)
Connectivity methods. Connectivity methods Exam Answer WAN/LAN  Each office will have its own Local Area Network or LAN.  But the company also wants.
Presentation transcript:

Wide Area Networks (WANs) Chapter 7 Copyright 2003 Prentice-Hall Panko’s Business Data Networks and Telecommunications, 4 th edition

2 Figure 7.1: Wide Area Networks (WANs) Chapters 4 and 5: LANs Customer premises operation, high speeds Chapter 6: Telephony LAN building wiring PSTN carrier service Chapter 7: WANs WAN technology often is based on telephone technology and services

3 Figure 7.1: Wide Area Networks (WANs) WAN Purposes Link sites (usually) within the same corporation Provide remote access to individuals who are off- site Internet access 1. Link Sites 2. Remote Access 3. Internet Access

4 Figure 7.1: Wide Area Networks (WANs) WAN Technologies Ordinary telephone line and telephone modem. Point-to-Point Leased lines Public switched data network (PSDN) Send your data over the Internet securely, using Virtual Private Network (VPN) technology PSDN VPN

5 Figure 7.1: Wide Area Networks (WANs) High Speeds and Low Speeds High cost per bit transmitted compared to LANs Lower speeds (mostly commonly 56 kbps to a few megabits per second) LANs Cheap, WANs Expensive (per bit transmitted) LANs Fast, WANs Slow

6 Figure 7.1: Wide Area Networks (WANs) WAN Technologies Ordinary telephone line and telephone modem. (low-speed access only) Point-to-Point Network of leased lines Public switched data network (PSDN) Send your data over the Internet securely, using Virtual Private Network (VPN) technology

7 Figure 7.2: Telephone Modem Communication PSTN Client A Server A Telephone 33.6 kbps Modem Binary Data Analog Modulated Signal Modem Need Modem at Each End Up to 33.6 kbps

8 Figure 7.2: Telephone Modem Communication PSTN Client B Server B Telephone Digital Access Line 56 kbps Modem For 56 kbps Download Speed Server Must Have a Digital Connection, Not a Modem

9 Figure 7.3: Telephone Modem Modulation Standards and Speeds V.34 Send and receive at up to 33.6 kbps Fall back in speed if line conditions are not optimal V.90 Receive at up to 56 kbps Send at up to 33.6 kbps Asymmetric speed is good for WWW service. Other party must have a digital connection to the PSTN

10 Figure 7.3: Telephone Modem Modulation Standards and Speeds V.92 Receive at up to 56 kbps Send at up to 33.6 kbps or higher if the line permits Other party must have a digital connection to the PSTN Modem on hold: can receive an incoming call for a short time without losing the connection Cuts call setup time in half

11 Figure 7.3: Telephone Modem Modulation Standards and Speeds Compression V.92 modems usually use V.44 compression, which downloads webpages twice as fast as the old standard for compression, V.42 bis Data: kbps Signal: 33.6 kbps

12 Figure 7.1: Wide Area Networks (WANs) WAN Technologies Ordinary telephone line and modem. (low-speed access only) Point-to-Point Network of leased lines Public switched data network (PSDN) Send your data over the Internet securely, using Virtual Private Network (VPN) technology

13 Figure 7.5: Trunk Line-Based Leased Line Computer Telephone Switch Telephone Switch Telephone Switch Server Access Line T1 Trunk Line (1.544 Mbps) T1 Leased Line (1.544 Mbps) End-to-End Circuit with Trunk Line Speed Trunk Line Extend trunk line speeds to end-to-end service

14 Figure 7.4: Leased Line Networks Leased Line (Private Line or Dedicated Line) Point-to-point connection Always on Usually very fast (56 kbps or more) Usually digital instead of analog Lower cost per bit transmitted than dial-up service But speeds are higher, so higher total cost Must be provisioned (set up). Can take weeks or months

15 Figure 7.4: Leased Line Networks Trunk Line-Based Leased Lines Require expensive optical fiber or (for 56 kbps, 64 kbps, T1 and E1 lines,) expensive data-grade copper UTP For data-grade UTP, need two pairs—one for transmission in each direction. Called four-wire circuits. Data-Grade Copper UTP

16 Figure 7.4: Leased Line Networks Trunk Line-Based Leased Lines 56 kbps Leased Lines Fractional T1 lines offer low-speed choices between 56 kbps and T1, typically: 128 bps, 256 kbps, 384 kbps, 512 kbps, 768 kbps T1 Leased Lines (1.544 Mbps) T3 Leased Lines SONET OC/SDM Leased Lines Highest Demand

17 Types of Leased Lines Trunk Line-Based Leased Lines (Optical Fiber or Data-Grade UTP) Leased Lines DSLs (Voice-Grade UTP) Cable Modem Satellites Or 3G (Chapter 6)

18 Figure 7.4: Leased Line Networks Digital Subscriber Lines (DSLs) Broadband speeds over single pair of voice-grade copper UTP Does not always work: distance limitations, etc. Where it does work, much cheaper than trunk line- based leased lines Existing Voice-Grade UTP

19 Figure 7.6: ASDL with Splitter Data WAN PSTN DSLAM ADSL Modem Splitter Telephone Subscriber Premises Telephone Company End Office Switch 1. Existing Pair of Voice-Grade UTP Wires PC Voice and Data

20 Figure 7.6: ASDL with Splitter Data WAN PSTN DSLAM ADSL Modem Splitter Telephone Subscriber Premises Telephone Company End Office Switch PC 1. Data 256 kbps to 1.5 Mbps kbps to 256 kbps

21 Figure 7.6: ASDL with Splitter Data WAN PSTN DSLAM ADSL Modem Splitter Telephone Subscriber Premises Telephone Company End Office Switch PC 1. Ordinary Telephone Service

22 Figure 7.4: Leased Line Networks Asymmetric DSL (ADSL) Summary Asymmetric speed Downstream (to customer): 256 kbps to over 1.5 Mbps Upstream (from customer): 64 kbps or higher Simultaneous telephone and data service DSL access multiplexer (DSLAM) at end telephone office Designed as consumer service, so data speed is not guaranteed

23 Figure 7.4: Leased Line Networks HDSL High-rate DSL Symmetric speed (768 kbps both ways) over one voice-grade twisted pair Designed for business use. (ADSL is designed for home use.) Speed guaranteed HDSL symmetric speed over one voice-grade twisted pair

24 Figure 7.4: Leased Line Networks SHDSL Super High-rate DSL Single voice-grade twisted pair; longer distances than ASDL, HSDL Symmetric speed Variable speed ranging from 384 kbps to 2 Mbps Speed guaranteed

25 Figure 7.7: Cable Modem Services PC Subscriber Premises 5. Cable Modem 4. Coaxial Cable to Premises 2. Optical Fiber to Neighborhood 3. Neighborhood Splitter ISP 1. Cable Television Head End 6. Requires NIC or USB port

26 Figure 7.4: Leased Line Networks Cable Modem Delivered by cable television operator High asymmetric speed Up to 10 Mbps downstream 64 kbps to 256 kbps upstream Speed is shared by people currently downloading in a neighborhood In practice, medium ADSL speed or higher

27 Figure 7.8: GEO Satellite System 2. Point-to-Point Uplink 3. Broadcast Downlink 4. Footprint 5. Earth Station A Earth Station B 1. Geosynchronous Satellite Satellite appears stationary in sky (35,785 km or 22,236 mi) Far, so earth station needs dish antenna

28 Figure 7.9: LEO and MEO Satellite Systems 3. Small Omnidirectional Transceiver 1. Currently Responsible LEO or MEO 2. Next Responsible LEO or MEO A few thousands of km or miles (Low Earth Orbit) or tens of thousands of km (miles) (Medium Earth Orbit) Closer than GEO, so omnidirectional transceivers can be used User is served by a succession of satellites

29 Figure 7.1: Wide Area Networks (WANs) WAN Technologies Ordinary telephone line and modem. (low-speed access only) Point-to-Point network of leased lines Public switched data networks (PSDN) Send your data over the Internet securely, using Virtual Private Network (VPN) technology PSDN

30 Figure 7.10: Leased Line versus Public Switched Data Networks T3 Lease Line Site C Site A Site B OC3 Leased Line T1 Leased Line T1 Leased Line Site E Site D 56 kbps Leased Line 56 kbps Leased Line 56 kbps Leased Line Multisite Leased Line Mesh Network

31 Figure 7.10: Leased Line versus Public Switched Data Networks Public Switched Data Network (PSDN) POP Site A Site B Point of Presence One leased line per site Site D Site C Site E Public Switched Data Network (PSDN)

32 Figure 7.10: Leased Line versus Public Switched Data Networks Leased Line Network Many leased lines Individual leased line spans long distances Company must plan, buy switching equipment, and operate the network Public Switched Data Network Only need one leased line from each site to a POP Few and short-distance leased lines PSDN carrier provides planning, switching, and operation of the network

33 Figure 7.11: Popular PSDN Services Service Typical Speeds Circuit- or Packet- Switched Reliable or Unreliable Virtual Circuits? Relative Price X.25 9,600 kbps to about 40 Mbps PacketReliableYesModerate Frame Relay 56 kbps to about 40 Mbps PacketUnreliableYesLow X.25 (Obsolete): Slow because of reliability Frame Relay Dominates PSDNs Today Unreliable for Lower Carrier Cost Speed Range is in Main Range of Corporate Demand

34 Figure 7.11: Popular PSDN Services Ethernet 10 Gbps and 40 Gbps PacketUnreliableNo Probably Low ATM 1 Mbps to about 156 Mbps PacketUnreliableYesHigh Service Typical Speeds Circuit- or Packet- Switched Reliable or Unreliable Virtual Circuits? Relative Price ATM is Faster than Frame Relay Should Grow in Demand as Corporate Demand Outgrows FR However, Ethernet MANs are Appearing Should Offer Lower Prices for Comparable Speeds

35 Frame Relay and ATM FR and ATM are Not Competitors Most PSDN carriers offer both so they can server any speed range Many interconnect their FR and ATM services, so that individual sites can use whatever service is best for them

36 Figure 7.11: Popular PSDN Services Most PSDNs are packet-switched, unreliable, and use virtual circuits All of these are designed to reduce carrier transmission costs so that lower competitive prices can be set Packet switching multiplexes trunk line transmissions, reducing trunk line costs Unreliability and virtual circuits simply switching, reducing switching costs

37 Figure 7.11: Popular PSDN Services Service Typical Speeds Circuit- or Packet- Switched Reliable or Unreliable Virtual Circuits? Relative Price ISDN Two 64 kbps B channels One 16 kbps D channel CircuitUnreliableNoModerate ISDN is Not Popular Expensive for its Slow Speed Has Niche in Backup Connections Because Dial-Up, So Only Pay for When Needed

38 Figure 7.12: Integrated Services Digital Network (ISDN) Personal Computer Desktop Telephone kbps B Channel Analog Voice Signal On Telephone Wires kbps B Channel Digital Signal On Serial Cable (1010) 1. 3 Multiplexed Channels on One Pair of Telephone Wires (2B+D) ISDN Wall Jack (RJ-45) kbps D channel is for Supervisory signaling 2B+D ISDN “Modem”

39 Quiz In ISDN, how many bits per second are multiplexed over the single wire pair connected to the wall jack and to the single pair running from the customer premises to the carrier end office?

40 Figure 7.12: Integrated Services Digital Network (ISDN) Personal Computer Desktop Telephone “ISDN Modem” 64 kbps B Channel Digital Signal On Serial Cable (1010) Internal DSU Converts Serial Port Signal to Digital B Channel Signal at 64 kbps (1010) All-digital Service ( ) ISDN Wall Jack (RJ-45) Bonding Use Both B Channels for Data Send and Receive at 128 kbps

41 Figure 7.14: Pricing Elements in Frame Relay Service Frame Relay Pricing Frame relay access device at site CSU/DSU at physical layer (converts between internal, PSDN digital formats) Frame Relay at the Data Link Layer Leased line from site to POP Port on the POP Pay by port speed Usually the largest price component Permanent virtual circuits (PVCs) among communicating sites Other charges

42 Figure 7.13: Access Devices CSU/DSU Channel service unit (CSU) protects the access line from unapproved voltage levels, etc. coming from the firm Data service unit (DSU) converts between internal digital format and digital format of access link to Frame Relay network. Different digital formats may have different baud rate, number of states, voltage levels, etc. DSU

43 Figure 7.13: Access Devices Site A Site B PC Server T1 CSU/DSU at Physical Layer Frame Relay at Data Link Layer T3 CSU/DSU at Physical Layer ATM etc. at Data Link Layer T1 Line T3 Line Access Device (Frame Relay Access Device) Access Device (Router)

44 Figure 7.14: Pricing Elements in Frame Relay Service Switch POP Customer Premises B Customer Premises C 1. Access Device Customer Premises A

45 Figure 7.14: Pricing Elements in Frame Relay Service Switch POP Customer Premises B Customer Premises C Customer Premises A 2. T1 Leased Access Line to POP

46 Figure 7.14: Pricing Elements in Frame Relay Service Switch POP Customer Premises B Customer Premises C Customer Premises A CIR = 56 kbps ABR = 1 Mbps 3. Port Speed Charge

47 Figure 7.14: Pricing Elements in Frame Relay Service Switch PVC 2 PVCs 1&2 POP PVC 2PVC 1 Customer Premises B Customer Premises C Customer Premises A PVC 1 4. PVC Charges

48 Figure 7.15: Frame Relay Pricing Details Other Charges Flat rate versus traffic volume charges Installation charges Managed service charges Service level agreement (SLA) charges Geographical Scope Frame Relay systems with broader geographical scope cost more

49 Figure 7.15: Frame Relay Pricing Details To Determine Needs for Each Site Step 1: Determine PVC Needs Determine needed speed from this site to each other site You will need a virtual circuit to serve the needed speed to each other site Sum all the virtual circuit speeds New Not in Book Site Being Analyzed 30 kbps needed 56 kbps PVC 800 kbps needed, 1 Mbps PVC Sum 1,056 kbps

50 Figure 7.15: Frame Relay Pricing Details Step 2: Determine Port Speed You need a port speed equal to or greater than the sum of the PVCs You can get by with 70% 70% of 1,056 kbps is 739 kbps Next-higher port speed may be 1 Mbps Don’t overdo port speed because port speed is most expensive component New Not in Book

51 Figure 7.15: Frame Relay Pricing Details Step 3: Determine Leased Line Speed Remember that port speed is more expensive than leased line speeds In general, don’t waste port speed by using a leased line much under its capacity If port speed is 1 Mbps, leased line should be T1 with Mbps capacity New Not in Book

52 Figure 7.15: Frame Relay Pricing Details Example The Situation Headquarters and two branch offices. Branches communicate with HQ at 200 kbps Branches communicate with each other at 40 kbps HQ B1 B2 New Not in Book

53 Figure 7.15: Frame Relay Pricing Details Example For HQ How many connections will HQ need? What are their speeds? What will be their PVC speeds (0 kbps, 56 kbps, 256 kbps, 512 kbps, 1 Mbps) If port speeds are 56 kbps, 256 kbps, 384 kbps, 512 kbps, what port speed will be needed? What leased line will be needed if speeds are 56 kbps, 256 kbps, 512 kbps, or T1? HQ New Not in Book

54 Figure 7.15: Frame Relay Pricing Details Example For Each Branch How many links will the branch need? What are their speeds? What will be their PVC speeds (0 kbps, 56 kbps, 256 kbps, 512 kbps, 1 Mbps) If port speeds are 56 kbps, 256 kbps, 384 kbps, 512 kbps, what port speed will be needed? What leased line will be needed if speeds are 56 kbps, 256 kbps, 512 kbps, or T1? B1 New Not in Book

55 Figure 7.1: Wide Area Networks (WANs) WAN Technologies Ordinary telephone line and modem. (low-speed access only) Point-to-Point Network of leased lines Public switched data networks (PSDN) Send your data over the Internet securely, using Virtual Private Network (VPN) technology VPN

56 Figure 7.17: Virtual Private Network VPN Server Corporate Site A VPN Server Corporate Site B 2. Remote Customer PC (or site) 3. Remote Corporate PC Tunnel Internet Extranet Remote Access for Intranet 1. Site-to-Site

57 Figure 7.16: Virtual Private Network (VPN) Issues Virtual Private Network (VPN) Transmission over the Internet with added security Some analysts include transmission over a PSDN with added security Why VPNs? PSDNs are not interconnected Only good for internal corporate communication But Internet reaches almost all sites in all firms Low transmission cost per bit transmitted

58 Figure 7.16: Virtual Private Network (VPN) Issues VPN Problems Latency and Sound Quality Internet can be congested Creates latency, reduces sound quality Use a single ISP as for VoIP (see Chapter 6) Security PPTP for remote access is popular IPsec for site-to-site transmission is popular

59 Figure 7.18: ISP-Based PPTP Remote Access VPN RADIUS Server PPTP RAS Internet ISP PPTP Access Concentrator Local Access Remote Corporate PC Corporate Site A Remote Access VPNs User dials into a remote access server (RAS) RAS often checks with RADIUS server for user identification information. Allows or rejects connection Secure Tunnel Unsecure TCP Control Channel

60 Figure 7.16: Virtual Private Network (VPN) Issues Point-to-Point Tunneling Protocol Available in Windows since Windows 95 No need for added software on clients Provided by many ISPs PPTP access concentrator at ISP access point Some security limitations No security between user site and ISP No message-by-message authentication of user Uses unprotected TCP control channel New

61 Figure 7.19: IPsec in Tunnel Mode Tunnel Only Between Sites Hosts Need No Extra Software Secure Tunnel Mode IPsec Server IPsec Server Local Network Local Network No Security In Site Network No Security In Site Network

62 Figure 7.19: IPsec in Transfer Mode End-to-End (Host-to-Host) Tunnel Hosts Need IPsec Software Secure Tunnel Transfer Mode IPsec Server IPsec Server Local Network Local Network Security In Site Network Security In Site Network Module F

63 Figure 7.16: Virtual Private Network (VPN) Issues IP Security (IPsec) Tunnel mode: sets up a secure tunnel between IPsec servers at two sites No security within sites No need to install IPsec software on stations Transfer mode: set up secure connection between two end hosts Protected even on internal networks Must install IPsec software on stations Module F

64 Figure 7.16: Virtual Private Network (VPN) Issues IP Security (IPsec) At internet layer, so protects information at higher layers Transparent: upper layer processes do not have to be modified Internet Layer with IPsec Protection TCPUDP HTTPSMTPFTPSNMP Protected

65 Figure 7.16: Virtual Private Network (VPN) Issues IP Security (IPsec) Security associations: Agreement on how security options will be implemented May be different in the two directions Security Association (SA1) for Transmissions From A to B Security Association (SA2) for Transmissions From B to A Party B Party A

66 Figure 7.16: Virtual Private Network (VPN) Issues IP Security (IPsec) Security associations: Governed by corporate policies List of Allowable Security Associations List of Allowable Security Associations Party B Party A IPsec Policy Server